I've written to all of you about this before, but perhaps without really
knowing what was going on....
please respond if you have ANY ideas... I'm fresh out.
i've done many web/newsgroup archives/faq's/etc searches, and nothing has
helped so far..
I've installed
openssl 0.9.6
apache 1.3.11
mod_ssl 2.5.0
ah yes, all this is on solaris so egd0.8 as well
here's the ssl configuration in httpd.conf
<IfDefine SSL>
Listen 80
Listen 443
</IfDefine>
<IfDefine SSL>
AddType application/x-x509-ca-cert .crt
AddType application/x-pkcs7-crl .crl
</IfDefine>
<IfModule mod_ssl.c>
SSLPassPhraseDialog builtin
SSLSessionCache dbm:/usr/local/apache/logs/ssl_scache
SSLSessionCacheTimeout 300
SSLMutex file:/usr/local/apache/logs/ssl_mutex
SSLRandomSeed startup builtin
SSLRandomSeed connect builtin
SSLLog /usr/local/apache/logs/ssl_engine_log
SSLLogLevel debug
</IfModule>
<IfDefine SSL>
<VirtualHost _default_:443>
DocumentRoot "/usr/local/WebRoot/Muse/SECTEST"
ServerName secure.it.damnit
ServerAdmin frustrated@secureitdamnit
ErrorLog /usr/local/apache/logs/error_log
TransferLog /usr/local/apache/logs/access_log
Options -Indexes FollowSymLinks +ExecCGI +Includes
SSLEngine on
SSLCertificateFile /usr/local/apache/conf/ssl.crt/secure.it.damnit.crt
SSLCertificateKeyFile /usr/local/apache/conf/ssl.key/secure.it.damnit.key
SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown
</VirtualHost>
</IfDefine>
here are the various errors I'm getting...
from netscape: ( not very interesting)
A network error occured while netscape was receiving data
(Network Error:)
Try connecting again later
when I run openssl s_client -connect localhost:443 -state
i get the following
CONNECTED(00000003)
SSL_connect:before/connect initialization
SSL_connect:SSLv2/v3 write client hello A
SSL_connect:SSLv3 read server hello A
depth=0 /C=US/ST=Maryland/L=Baltimore/O=The Johns Hopkins University
Press/OU=Project [EMAIL PROTECTED]
verify error:num=18:self signed certificate
verify return:1
depth=0 /C=US/ST=Maryland/L=Baltimore/O=The Johns Hopkins University
Press/OU=Project [EMAIL PROTECTED]
verify return:1
SSL_connect:SSLv3 read server certificate A
SSL_connect:SSLv3 read server key exchange A
SSL_connect:SSLv3 read server done A
SSL_connect:SSLv3 write client key exchange A
SSL_connect:SSLv3 write change cipher spec A
SSL_connect:SSLv3 write finished A
SSL_connect:SSLv3 flush data
SSL_connect:SSLv3 read finished A
---
Certificate chain
0 s:/C=US/ST=Maryland/L=Baltimore/O=The Johns Hopkins University
Press/OU=Project [EMAIL PROTECTED]
i:/C=US/ST=Maryland/L=Baltimore/O=The Johns Hopkins University
Press/OU=Project [EMAIL PROTECTED]
---
Server certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
subject=/C=US/ST=Maryland/L=Baltimore/O=The Johns Hopkins University
Press/OU=Project [EMAIL PROTECTED]
issuer=/C=US/ST=Maryland/L=Baltimore/O=The Johns Hopkins University
Press/OU=Project [EMAIL PROTECTED]
---
No client certificate CA names sent
---
SSL handshake has read 1311 bytes and written 320 bytes
---
New, TLSv1/SSLv3, Cipher is EDH-RSA-DES-CBC3-SHA
Server public key is 1024 bit
SSL-Session:
Protocol : TLSv1
Cipher : EDH-RSA-DES-CBC3-SHA
Session-ID:
7982325BB1BA3511D48E59CBC489C4FE1FE8275AA9052A162BAAA50926CB7BE9
Session-ID-ctx:
Master-Key:
7A1DA9346EE6F8B477FD4EB6CA423109CA911CD17D86E7C6A42378376F7E1CD8FFFD1DFCBD8C5EB43F804504C7EEA04D
Key-Arg : None
Start Time: 972594957
Timeout : 300 (sec)
Verify return code: 0 (ok)
---
read:errno=0
SSL3 alert write:warning:close notify
and finally the logs
from error_log
[Thu Oct 26 17:17:26 2000] [notice] child pid 14897 exit signal Bus Error
(10)
from ssl_engine_log (this is with debug)
[26/Oct/2000 17:21:42 15480] [info] Connection to child 22 established
(server erato.mse.jhu.edu:443, client 127.0.0.1)
[26/Oct/2000 17:21:42 15480] [trace] Seeding PRNG with 1032 bytes of entropy
[26/Oct/2000 17:21:42 15480] [debug] OpenSSL: read 7/7 bytes from
BIO#00337580 [mem: 004D9008] (BIO dump follows)
+-------------------------------------------------------------------------+
| 0000: 80 80 01 03 01 00 57 ......W |
+-------------------------------------------------------------------------+
[26/Oct/2000 17:21:42 15480] [debug] OpenSSL: read 123/123 bytes from
BIO#00337580 [mem: 004D900F] (BIO dump follows)
+-------------------------------------------------------------------------+
| 0000: 00 00 00 20 00 00 16 00-00 13 00 00 0a 07 00 c0 ... ............ |
| 0010: 00 00 66 00 00 07 00 00-05 00 00 04 05 00 80 03 ..f............. |
| 0020: 00 80 01 00 80 08 00 80-00 00 65 00 00 64 00 00 ..........e..d.. |
| 0030: 63 00 00 62 00 00 61 00-00 60 00 00 15 00 00 12 c..b..a..`...... |
| 0040: 00 00 09 06 00 40 00 00-14 00 00 11 00 00 08 00 .....@.......... |
| 0050: 00 06 00 00 03 04 00 80-02 00 80 23 fa c0 ab fa ...........#.... |
| 0060: a7 f7 5a ab 72 5e d4 71-6f ea c7 b6 4d 96 ae 00 ..Z.r^.qo...M... |
| 0070: 32 e7 9f 18 5b de ba c0-56 61 cf 2...[...Va. |
+-------------------------------------------------------------------------+
[26/Oct/2000 17:21:42 15480] [debug] OpenSSL: write 1024/1024 bytes to
BIO#00337580 [mem: 004EB008] (BIO dump follows)
+-------------------------------------------------------------------------+
| 0000: 16 03 01 00 4a 02 00 00-46 03 01 39 f8 a0 66 36 ....J...F..9..f6 |
| 0010: 9a f0 3b 28 3d a5 5f db-ee 8b 59 88 54 17 c2 47 ..;(=._...Y.T..G |
| 0020: cc a1 3a 8d 7f 93 11 6c-d1 35 34 20 3f cc de 8e ..:....l.54 ?... |
| 0030: 11 70 92 5c be dd b6 78-31 7a dd d0 7d 59 ee 87 .p.\...x1z..}Y.. |
| 0040: 5d cc c7 7b d4 1a 3f e2-c6 3e 30 7d 00 16 00 16 ]..{..?..>0}.... |
| 0050: 03 01 02 fd 0b 00 02 f9-00 02 f6 00 02 f3 30 82 ..............0. |
| 0060: 02 ef 30 82 02 58 02 01-00 30 0d 06 09 2a 86 48 ..0..X...0...*.H |
| 0070: 86 f7 0d 01 01 04 05 00-30 81 bf 31 0b 30 09 06 ........0..1.0.. |
| 0080: 03 55 04 06 13 02 55 53-31 11 30 0f 06 03 55 04 .U....US1.0...U. |
| 0090: 08 13 08 4d 61 72 79 6c-61 6e 64 31 12 30 10 06 ...Maryland1.0.. |
| 00a0: 03 55 04 07 13 09 42 61-6c 74 69 6d 6f 72 65 31 .U....Baltimore1 |
| 00b0: 2b 30 29 06 03 55 04 0a-13 22 54 68 65 20 4a 6f +0)..U..."The Jo |
| 00c0: 68 6e 73 20 48 6f 70 6b-69 6e 73 20 55 6e 69 76 hns Hopkins Univ |
| 00d0: 65 72 73 69 74 79 20 50-72 65 73 73 31 15 30 13 ersity Press1.0. |
| 00e0: 06 03 55 04 0b 13 0c 50-72 6f 6a 65 63 74 20 4d ..U....Project M |
| 00f0: 75 73 65 31 1a 30 18 06-03 55 04 03 13 11 65 72 use1.0...U....er |
| 0100: 61 74 6f 2e 6d 73 65 2e-6a 68 75 2e 65 64 75 31 ato.mse.jhu.edu1 |
| 0110: 29 30 27 06 09 2a 86 48-86 f7 0d 01 09 01 16 1a )0'..*.H........ |
| 0120: 61 69 6c 65 65 6e 40 63-68 61 6f 73 2e 70 72 65 [EMAIL PROTECTED] |
| 0130: 73 73 2e 6a 68 75 2e 65-64 75 30 1e 17 0d 30 30 ss.jhu.edu0...00 |
| 0140: 31 30 31 31 31 38 34 32-30 35 5a 17 0d 30 30 31 1011184205Z..001 |
| 0150: 31 31 30 31 38 34 32 30-35 5a 30 81 bf 31 0b 30 110184205Z0..1.0 |
| 0160: 09 06 03 55 04 06 13 02-55 53 31 11 30 0f 06 03 ...U....US1.0... |
| 0170: 55 04 08 13 08 4d 61 72-79 6c 61 6e 64 31 12 30 U....Maryland1.0 |
| 0180: 10 06 03 55 04 07 13 09-42 61 6c 74 69 6d 6f 72 ...U....Baltimor |
| 0190: 65 31 2b 30 29 06 03 55-04 0a 13 22 54 68 65 20 e1+0)..U..."The |
| 01a0: 4a 6f 68 6e 73 20 48 6f-70 6b 69 6e 73 20 55 6e Johns Hopkins Un |
| 01b0: 69 76 65 72 73 69 74 79-20 50 72 65 73 73 31 15 iversity Press1. |
| 01c0: 30 13 06 03 55 04 0b 13-0c 50 72 6f 6a 65 63 74 0...U....Project |
| 01d0: 20 4d 75 73 65 31 1a 30-18 06 03 55 04 03 13 11 Muse1.0...U.... |
| 01e0: 65 72 61 74 6f 2e 6d 73-65 2e 6a 68 75 2e 65 64 erato.mse.jhu.ed |
| 01f0: 75 31 29 30 27 06 09 2a-86 48 86 f7 0d 01 09 01 u1)0'..*.H...... |
| 0200: 16 1a 61 69 6c 65 65 6e-40 63 68 61 6f 73 2e 70 [EMAIL PROTECTED] |
| 0210: 72 65 73 73 2e 6a 68 75-2e 65 64 75 30 81 9f 30 ress.jhu.edu0..0 |
| 0220: 0d 06 09 2a 86 48 86 f7-0d 01 01 01 05 00 03 81 ...*.H.......... |
| 0230: 8d 00 30 81 89 02 81 81-00 db 99 77 65 b1 b5 ff ..0........we... |
| 0240: 9e 68 f0 c6 04 1d b9 15-97 24 ca d6 58 36 1d 16 .h.......$..X6.. |
| 0250: a7 16 39 b0 0f 19 10 55-20 33 f9 06 06 5e f2 3e ..9....U 3...^.> |
| 0260: 0d d6 38 7c 7b 78 a8 6a-db 42 f9 46 55 a1 96 18 ..8|{x.j.B.FU... |
| 0270: 84 11 cb 05 14 93 ba c7-0f a8 89 ff ad fe a4 03 ................ |
| 0280: 1c c2 92 7d 58 96 6a c1-a2 6e bd c1 9e 5f 1e 3e ...}X.j..n..._.> |
| 0290: 87 03 b9 4a b7 c3 90 b1-08 42 7a f5 c2 8a e0 eb ...J.....Bz..... |
| 02a0: e7 46 d8 58 a1 60 2a 01-e3 f1 96 85 21 54 c9 80 .F.X.`*.....!T.. |
| 02b0: 45 3d 1f 10 e6 dd 4f 50-93 02 03 01 00 01 30 0d E=....OP......0. |
| 02c0: 06 09 2a 86 48 86 f7 0d-01 01 04 05 00 03 81 81 ..*.H........... |
| 02d0: 00 46 9c 78 b4 ad df d1-25 9b 16 51 74 8a c3 00 .F.x....%..Qt... |
| 02e0: 02 3c 25 3a 91 a3 d3 58-ab 09 02 3e e5 ed 63 9e .<%:...X...>..c. |
| 02f0: 42 15 87 fd bb cd ff 4e-a4 cd ac d5 1b 23 f3 16 B......N.....#.. |
| 0300: a9 0f 9f 9f 03 f6 c2 52-a1 d3 41 d6 4d 99 1c 0d .......R..A.M... |
| 0310: 0b 68 7d ec d2 02 fa ef-e3 08 cc a1 81 00 07 4f .h}............O |
| 0320: ec 77 05 94 b6 c2 2b 92-82 ff b1 41 1f 8a 02 36 .w....+....A...6 |
| 0330: 83 88 2e 96 1e c6 2d 02-94 76 91 4e cf 5e 5a 19 ......-..v.N.^Z. |
| 0340: 91 d2 72 53 f6 98 00 d0-d3 42 e2 15 88 64 e5 2a ..rS.....B...d.* |
| 0350: 9e 16 03 01 01 8d 0c 00-01 89 00 80 e6 96 9d 3d ...............= |
| 0360: 49 5b e3 2c 7c f1 80 c3-bd d4 79 8e 91 b7 81 82 I[.,|.....y..... |
| 0370: 51 bb 05 5e 2a 20 64 90-4a 79 a7 70 fa 15 a2 59 Q..^* d.Jy.p...Y |
| 0380: cb d5 23 a6 a6 ef 09 c4-30 48 d5 a2 2f 97 1f 3c ..#.....0H../..< |
| 0390: 20 12 9b 48 00 0e 6e dd-06 1c bc 05 3e 37 1d 79 ..H..n.....>7.y |
| 03a0: 4e 53 27 df 61 1e bb be-1b ac 9b 5c 60 44 cf 02 NS'.a......\`D.. |
| 03b0: 3d 76 e0 5e ea 9b ad 99-1b 13 a6 3c 97 4e 9e f1 =v.^.......<.N.. |
| 03c0: 83 9e b5 db 12 51 36 f7-26 2e 56 a8 87 15 38 df .....Q6.&.V...8. |
| 03d0: d8 23 c6 50 50 85 e2 1f-0d d5 c8 6b 00 01 02 00 .#.PP......k.... |
| 03e0: 80 63 67 3f 90 3e ab 46-8b 1e 9b 0d f3 77 27 59 .cg?.>.F.....w'Y |
| 03f0: 41 b3 29 86 1b 20 84 f8-03 3c 33 51 18 be ef 45 A.).. ...<3Q...E |
+-------------------------------------------------------------------------+
[26/Oct/2000 17:21:42 15480] [debug] OpenSSL: write 236/236 bytes to
BIO#00337580 [mem: 004EB008] (BIO dump follows)
+-------------------------------------------------------------------------+
| 0000: 80 30 38 85 a9 f0 be 2b-72 d4 e6 40 f7 87 c0 4f .08....+r..@...O |
| 0010: e4 ed 26 bb 72 7b 8b aa-09 09 7a 2d ed 44 da a3 ..&.r{....z-.D.. |
| 0020: 98 ac 88 dc 3a 9e c8 f8-1b 89 e7 4e 49 ae 6b c2 ....:......NI.k. |
| 0030: 49 37 ab 82 99 bc 6a 21-bd be d4 16 ec 4d db da I7....j!.....M.. |
| 0040: 84 c2 c9 65 b0 8c 7d 53-4e 9e dc ca ce f4 b5 6f ...e..}SN......o |
| 0050: 37 9a b7 76 0b a0 d4 23-ad 3a 87 c9 16 02 bf 75 7..v...#.:.....u |
| 0060: 9a 00 80 90 34 1e 5c a4-0f c8 84 af 24 99 23 46 ....4.\.....$.#F |
| 0070: 12 a7 1f 38 71 4a 59 85-5a e2 77 bf 47 68 3d bd ...8qJY.Z.w.Gh=. |
| 0080: f2 0c 3b 26 a2 18 27 d3-f9 a3 96 c5 04 2a 63 94 ..;&..'......*c. |
| 0090: 5a 46 1d e5 e6 53 6d b4-82 c6 9f 5d a7 cf 94 aa ZF...Sm....].... |
| 00a0: 86 a5 bc 04 93 b8 44 31-e7 68 f4 21 ba e2 8b ac ......D1.h.!.... |
| 00b0: 32 2b 0a 72 e9 a7 9f fc-af a9 25 e3 d2 00 c0 49 2+.r......%....I |
| 00c0: bc 2f d8 72 69 99 88 31-78 c0 b8 5e c0 ec fd 33 ./.ri..1x..^...3 |
| 00d0: b2 e8 77 d2 af b9 c9 0d-7d fe b8 e8 16 bf f9 e5 ..w.....}....... |
| 00e0: f4 06 f9 16 03 01 00 04-0e ......... |
| 00ec - <SPACES/NULS>
+-------------------------------------------------------------------------+
[26/Oct/2000 17:21:42 15480] [debug] OpenSSL: read 5/5 bytes from
BIO#00337580 [mem: 004D9008] (BIO dump follows)
+-------------------------------------------------------------------------+
| 0000: 16 03 01 00 86 ..... |
+-------------------------------------------------------------------------+
[26/Oct/2000 17:21:42 15480] [debug] OpenSSL: read 134/134 bytes from
BIO#00337580 [mem: 004D900D] (BIO dump follows)
+-------------------------------------------------------------------------+
| 0000: 10 00 00 82 00 80 52 69-47 5e b7 a7 86 da d5 dd ......RiG^...... |
| 0010: 75 16 9d 34 d0 0e e1 db-d3 a8 07 8b ac f6 f9 6b u..4...........k |
| 0020: 93 17 ee ed 80 f2 ac f4-8d 73 a4 0b 9f e3 8e 82 .........s...... |
| 0030: ed 03 a0 f1 16 dc 00 b0-b0 43 3d 42 2c 42 43 d6 .........C=B,BC. |
| 0040: d1 62 74 ad 1e e5 a9 bb-fd bb dd 31 fb e7 27 9a .bt........1..'. |
| 0050: da 9b a1 ac c3 5e 94 58-22 4e b5 72 e3 4c d7 41 .....^.X"N.r.L.A |
| 0060: 33 9d bf 6b e5 1f 66 8d-34 1c 25 ce 23 7e 21 85 3..k..f.4.%.#~!. |
| 0070: 72 49 2c 32 f1 8f 63 9e-46 e6 6a 6c 11 cb 46 35 rI,2..c.F.jl..F5 |
| 0080: a7 01 42 70 df 86 ..Bp.. |
+-------------------------------------------------------------------------+
[26/Oct/2000 17:21:42 15480] [debug] OpenSSL: read 5/5 bytes from
BIO#00337580 [mem: 004D9008] (BIO dump follows)
+-------------------------------------------------------------------------+
| 0000: 14 03 01 00 01 ..... |
+-------------------------------------------------------------------------+
[26/Oct/2000 17:21:42 15480] [debug] OpenSSL: read 1/1 bytes from
BIO#00337580 [mem: 004D900D] (BIO dump follows)
+-------------------------------------------------------------------------+
| 0000: 01 . |
+-------------------------------------------------------------------------+
[26/Oct/2000 17:21:42 15480] [debug] OpenSSL: read 5/5 bytes from
BIO#00337580 [mem: 004D9008] (BIO dump follows)
+-------------------------------------------------------------------------+
| 0000: 16 03 01 00 28 ....( |
+-------------------------------------------------------------------------+
[26/Oct/2000 17:21:42 15480] [debug] OpenSSL: read 40/40 bytes from
BIO#00337580 [mem: 004D900D] (BIO dump follows)
+-------------------------------------------------------------------------+
| 0000: 62 60 90 50 6b 83 e6 6a-16 e2 a4 6c e0 64 0e 63 b`.Pk..j...l.d.c |
| 0010: 0c 99 a6 4f db e7 5d 6b-4b 3f c1 44 2e 34 2b a7 ...O..]kK?.D.4+. |
| 0020: f2 f0 2d ee 35 4a ea c1- ..-.5J.. |
+-------------------------------------------------------------------------+
[26/Oct/2000 17:21:42 15480] [debug] OpenSSL: write 51/51 bytes to
BIO#00337580 [mem: 004EB008] (BIO dump follows)
+-------------------------------------------------------------------------+
| 0000: 14 03 01 00 01 01 16 03-01 00 28 27 9c ba d9 bf ..........('.... |
| 0010: 1f 8e bc 40 3e 56 ad b8-5b 26 51 cd 9b ba 41 6a ...@>V..[&Q...Aj |
| 0020: 15 ab fa 75 ce f2 1c bf-6b 91 83 c1 ac f5 f8 20 ...u....k...... |
| 0030: 61 19 3a a.: |
+-------------------------------------------------------------------------+
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
