Hello:
This is really strange.
I am using a test server certificate generated from mod SSL 2.8.2
for apache 1.3.19 on a freshly installed Redhat 7.1 server.
I used the stock openssl (OpenSSL 0.9.6-3) that came with the
installation.
If I connect to https://serverName using Internet Explorer,
everything works fine. I get the dialog box that says that
the certificate is not from a trusted authority and then
when I hit OK, I get the apache test page.
If I try it in Netscape, I get the dialog box about the
certificate name check and then, when I hit continue,
I get another dialog box that states:
An I/O error occurred during security authorization.
Please try your connection again.
I can repeat this as many times as I like, but the exception
always pops up.
Here are some messages in the error_log:
[Tue Apr 24 15:08:28 2001] [notice] Apache/1.3.19 (Unix) mod_jk
mod_ssl/2.8.1 OpenSSL/0.9.6 configured -- resuming normal operations
[Tue Apr 24 15:08:43 2001] [error] mod_ssl: SSL handshake failed (server
www.JAMMConsulting.com:443, client 192.168.1.2) (OpenSSL library error
follows)
[Tue Apr 24 15:08:43 2001] [error] OpenSSL: error:0407106B:rsa
routines:RSA_padding_check_PKCS1_type_2:block type is not 02
[Tue Apr 24 15:08:43 2001] [error] OpenSSL: error:04065072:rsa
routines:RSA_EAY_PRIVATE_DECRYPT:padding check failed
[Tue Apr 24 15:08:43 2001] [error] OpenSSL: error:1408B076:SSL
routines:SSL3_GET_CLIENT_KEY_EXCHANGE:bad rsa decrypt
Does anyone know what this means and why it is occurring?
Thanks,
Neil.
--
Neil Aggarwal
JAMM Consulting, Inc. -- (972) 612-6056, http://www.JAMMConsulting.com
Custom Internet Development -- Java, JSP, servlets, databases
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]