> Can somebody explain the following error:
>I am using Apache - 1.3.14
>mod_ssl 2.7.1
>openssl 0.9.6
>
> >openssl s_client -connect localhost:8080 -state -debug
>CONNECTED(00000003)
>SSL_connect:before/connect initialization
>write to 08086400 [080A8000] (130 bytes => 130 (0x82))
>0000 - 80 80 01 03 01 00 57 00-00 00 20 00 00 16 00 00 ......W... .....
>0010 - 13 00 00 0a 07 00 c0 00-00 66 00 00 07 00 00 05 .........f......
>0020 - 00 00 04 05 00 80 03 00-80 01 00 80 08 00 80 00 ................
>0030 - 00 65 00 00 64 00 00 63-00 00 62 00 00 61 00 00 .e..d..c..b..a..
>0040 - 60 00 00 15 00 00 12 00-00 09 06 00 40 00 00 14 `...........@...
>0050 - 00 00 11 00 00 08 00 00-06 00 00 03 04 00 80 02 ................
>0060 - 00 80 33 6b f0 59 7a e8-28 54 56 c0 f3 34 44 96 ..3k.Yz.(TV..4D.
>0070 - ee 37 42 de b2 8e 50 c8-3a 8e ff 68 f0 65 27 59 .7B...P.:..h.e'Y
>0080 - b2 c6 ..
>SSL_connect:SSLv2/v3 write client hello A
>read from 08086400 [080AE000] (7 bytes => 7 (0x7))
>0000 - 3c 21 44 4f 43 54 59 <!DOCTY
>SSL_connect:error in SSLv2/v3 read server hello A
>21558:error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown
>protocol:/work/trees/netbsd-1-5/lib/libssl/../../crypto/dist/openssl/ssl/s23
>_clnt.c:458:
You are trying to talk SSL to a non-SSL port.
Your client sent its ClientHello message to port 8080
and expected the server to send back a ServerHello
message.
What happened instead is that your client connected
with a standard HTTP port, and it responded with
"<!DOCTY" and probably a whole lot more - <!DOCTYPE etc. etc.
(I'm guessing it's an error page that says you used
bad HTTP syntax.)
Apache needs to be started as a secure server, and
you usually want to talk to port 443, the default HTTPS port.
If you'd rather use port 8080, that's fine, but you'll have
to configure Apache to listen on port 8080 instead of 443.
If you don't have root access you might want to have
Apache use port 4433, which is what the openssl
test apps use by default.
((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((
Tom Biggs
'89 FJ1200 DoD #1146
"The whole aim of practical politics is to keep the populace alarmed -
and hence clamorous to be led to safety - by menacing it with an endless
series of hobgoblins, all of them imaginary." -- H.L. Mencken
))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
