Hi,
i use Solaris 8 Sparc and have installed OpenSSL/0.9.6a + mod_perl/1.25
+ mod_ssl/2.8.4 + Apache/1.3.20.
The compilation goes ok, the certification generation also.
But i cannot contact my server over https.
I use the standard http.conf file, the status of Apache is without
errors see :
err_log:
[Fri Aug 10 07:49:59 2001] [notice] Apache/1.3.20 (Unix)
mod_perl/1.25 mod_ssl/2.8.4 OpenSSL/0.9.6a configured --
resuming normal operations
after contact over openssl and lynx :
[Fri Aug 10 07:51:18 2001] [error] [client 134.96.158.233]
Invalid method in request \200z^A^C^A
[Fri Aug 10 07:51:24 2001] [error] [client 134.96.158.233]
Invalid method in request \200z^A^C^A
[Fri Aug 10 07:52:38 2001] [error] [client 134.96.158.233]
Invalid method in request \200j^A^C^A
[Fri Aug 10 07:52:38 2001] [error] [client 134.96.158.233]
Invalid method in request \200j^A^C
[Fri Aug 10 07:53:08 2001] [error] [client 134.96.158.233]
Invalid method in request \200j^A^C^A
[Fri Aug 10 07:53:08 2001] [error] [client 134.96.158.233]
Invalid method in request \200j^A^C
[Fri Aug 10 07:53:30 2001] [error] [client 134.96.158.233]
Invalid method in request \200z^A^C^A
and ssl_engine_log :
[10/Aug/2001 07:49:53 16950] [info] Server: Apache/1.3.20,
Interface: mod_ssl/2.8.4, Library: OpenSSL/0.9.6a
[10/Aug/2001 07:49:53 16950] [info] Init: 1st startup round
(still not detached)
[10/Aug/2001 07:49:53 16950] [info] Init: Initializing OpenSSL
library
[10/Aug/2001 07:49:54 16950] [info] Init: Loading certificate &
private key of SSL-aware server stl-ad.htw-saarland.de:443
[10/Aug/2001 07:49:54 16950] [info] Init: Seeding PRNG with 136
bytes of entropy
[10/Aug/2001 07:49:54 16950] [info] Init: Generating temporary
RSA private keys (512/1024 bits)
[10/Aug/2001 07:49:58 16950] [info] Init: Configuring temporary
DH parameters (512/1024 bits)
[10/Aug/2001 07:49:58 16951] [info] Init: 2nd startup round
(already detached)
[10/Aug/2001 07:49:58 16951] [info] Init: Reinitializing OpenSSL
library
[10/Aug/2001 07:49:58 16951] [info] Init: Seeding PRNG with 136
bytes of entropy
[10/Aug/2001 07:49:58 16951] [info] Init: Configuring temporary
RSA private keys (512/1024 bits)
[10/Aug/2001 07:49:58 16951] [info] Init: Configuring temporary
DH parameters (512/1024 bits)
[10/Aug/2001 07:49:58 16951] [info] Init: Initializing (virtual)
servers for SSL
[10/Aug/2001 07:49:58 16951] [info] Init: Configuring server
stl-s-ad.htw-saarland.de:443 for SSL protocol
the commandline : openssl s_client -connect stl-s-ad.htw-saarland.de:443
-state -debug
produce the following output:
SSL_connect:before/connect initialization
SSL_connect:SSLv2/v3 write client hello A
SSL_connect:error in SSLv2/v3 read server hello A
16975:error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown
protocol:s23_clnt.c:460:
CONNECTED(00000004)
write to 00157F40 [00158CB0] (124 bytes => 124 (0x7C))
0000 - 80 7a 01 03 01 00 51 00-00 00 20 00 00 16 00 00
.z....Q... .....
0010 - 13 00 00 0a 07 00 c0 00-00 66 00 00 05 00 00 04
.........f......
0020 - 03 00 80 01 00 80 08 00-80 00 00 65 00 00 64 00
...........e..d.
0030 - 00 63 00 00 62 00 00 61-00 00 60 00 00 15 00 00
.c..b..a..`.....
0040 - 12 00 00 09 06 00 40 00-00 14 00 00 11 00 00 08
......@.........
0050 - 00 00 06 00 00 03 04 00-80 02 00 80 32 8c f4 b9
............2...
0060 - 28 ed 95 eb 0a fb fa 60-d2 20 98 3d 3b d0 fc 61 (......`.
.=;..a
0070 - 9d fc 81 20 8a f8 56 cf-bc 81 fb d7 ...
..V.....
read from 00157F40 [0015E210] (7 bytes => 7 (0x7))
0000 - 3c 21 44 4f 43 54 59 <!DOCTY
the commandline . lynx -dump https://stl-s-ad.htw-saarland.de
produce the following output:
Looking up stl-s-ad.htw-saarland.de
Making HTTPS connection to stl-s-ad.htw-saarland.de
Retrying connection.
Looking up stl-s-ad.htw-saarland.de
Making HTTPS connection to stl-s-ad.htw-saarland.de
Alert!: Unable to make secure connection to remote host.
lynx: Can't access startfile https://stl-s-ad.htw-saarland.de/
What is wrong ??????
Can anyone help me ????
thanks for any help
w. pauly
--
Hochschule fuer ## ## ###### ## ##
Technik und Wirtschaft ## # ## ## ## # ##
des Saarlandes ## ## ## ## # ##
-------------------------------------------------------------------------------
HTW Dipl.-Ing. Wolfgang Pauly
Fachbereich GIS
Goebenstr. 40 EMail: [EMAIL PROTECTED]
D-66117 Saarbruecken Tel: 0681-5867-239
Fax: 0681-5867-122
www: http://www.htw-saarland.de
-------------------------------------------------------------------------------
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
