The error you posted from logs implies the request the server is getting
is http rather then https, perhaps your redirect or rewrite is not
functioning properly?
Thanks,
Ron DuFresne
On Wed, 5 Feb 2003, Steve Pirk wrote:
> I check the mail archives, but could not find a good
> answer for this "problem" I am having.
>
> I am building out a dev environment using apache
> on Solaris. The dev environment needs to run under
> SSL (to simulate the production environment). I am
> starting with 4 virtual servers. They all use the
> same cert file, but are on different ports.
>
> The problem I am running into is that only the "first"
> VirtualHost works. Requests to subsequent ports result
> in a mod_ssl:error:HTTP-request error. Here is the error_log
> entry:
>
> [Wed Feb 5 16:45:11 2003] [error] mod_ssl: SSL handshake failed: HTTP
> spoken on HTTPS port; trying to send HTML error page (OpenSSL library
> error follows)
> [Wed Feb 5 16:45:11 2003] [error] OpenSSL: error:1407609C:SSL
> routines:SSL23_GET_CLIENT_HELLO:http request [Hint: speaking HTTP to HTTPS
> port!?]
>
> This is being used in conjunction with an auth package,
> but the redirect after logging in is https://
>
> Does anyone knnow of a good way to have multiple
> SSL virtual servers on one apache instance?
>
> Here is a sample of httpd.conf. In this case, port 7000
> works, but 7001 and 7002 get the mod_ssl error.
>
> <VirtualHost 172.16.202.25:7000>
> DocumentRoot /some/doc/root
> SSLEngine on
> SSLCertificateFile /usr/local/apache/certs/my_cert.crt
> SSLCertificateKeyFile /usr/local/apache/certs/my_cert.key
> </VirtualHost>
>
> <VirtualHost 172.16.202.25:7001>
> DocumentRoot /some/doc/root
> SSLEngine on
> SSLCertificateFile /usr/local/apache/certs/my_cert.crt
> SSLCertificateKeyFile /usr/local/apache/certs/my_cert.key
> </VirtualHost>
>
> <VirtualHost 172.16.202.25:7002>
> DocumentRoot /some/doc/root
> SSLEngine on
> SSLCertificateFile /usr/local/apache/certs/my_cert.crt
> SSLCertificateKeyFile /usr/local/apache/certs/my_cert.key
> </VirtualHost>
>
> --
> Steve (egrep)
> ______________________________________________________________________
> Apache Interface to OpenSSL (mod_ssl) www.modssl.org
> User Support Mailing List [EMAIL PROTECTED]
> Automated List Manager [EMAIL PROTECTED]
>
--
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
admin & senior security consultant: sysinfo.com
http://sysinfo.com
"Cutting the space budget really restores my faith in humanity. It
eliminates dreams, goals, and ideals and lets us get straight to the
business of hate, debauchery, and self-annihilation."
-- Johnny Hart
testing, only testing, and damn good at it too!
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
