Steve Freitas wrote:
> [10/Nov/1999 20:47:25 25706] [info] Connection to child 3 established
> (server blah.com:443, client 12.34.56.78)
> [10/Nov/1999 20:47:25 25706] [error] SSL handshake failed (server
> blah.com:443, client 12.34.56.78) (OpenSSL library error follows)
> [10/Nov/1999 20:47:25 25706] [error] OpenSSL: error:0407106B:rsa
> routines:RSA_padding_check_PKCS1_type_2:block type is not 02
> [10/Nov/1999 20:47:25 25706] [error] OpenSSL: error:04065072:rsa
> routines:RSA_EAY_PRIVATE_DECRYPT:padding check failed
> [10/Nov/1999 20:47:25 25706] [error] OpenSSL: error:1408F071:SSL
> routines:SSL3_GET_RECORD:bad mac decode
Since I just asked the same thing a couple days ago and got an answer,
I'll do my due diligence and help out the next guy :) More than likely
this is a client side certificate problem. Go into your Netscape
security settings (Click the lock) and clear out your web site
certificates. Give it another shot and I bet it'll work. It seems that
the problem comes up when accessing multiple sites that both use the
Snake Oil certificate or when you have an old Snake Oil certificate
laying around for your current site. To solve my problem I just read
the FAQ on becoming your own CA and I started signing my own
certificates for testing purposes. I may not have explained it so well,
so you can check out the archives and see the response I got at:
http://www.progressive-comp.com/Lists/?l=apache-modssl&m=94222109726109&w=2
Robert
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]