> > Well, I don't know actually, but the fact that IE does in fact do the
> > redirect when you go to port 80 and not when you go to 443, and, the
fact
> > that the web server never even records the GET / in it's logs, to me
> > indicates it's not getting far enough to even send the index.html page
back,
> > right?
>
> Try using ssldump to inspect the traffic taking place
>
> ssldump -k /path/to/private_key.pem -d port 443
>
> quite amazing little tool and will tell you a lot about the
> SSL operations of your server.
>
> Regards
> Henrik
Thank you Henrik,
I ran ssldump as you suggested but it doesn't even indicate an error as far
as I see. I also find it strange that when I hit page refresh on my IE, I
get the error response in under 2 seconds. But, the ssldump doesn't show any
activity at all for about 10 seconds, then dumps its data. I'm assuming
ssldump is waiting for reasons I probably don't care about, but just in
case, I thought I'd mention it.
Here is the result from the ssldump...
(/usr/local/ssl/private) # ssldump -k cakey.pem -d port 443 > /root/dmp
Enter PEM pass phrase: (which I entered)
New TCP connection #1: dann.3db2b.com(3846) <-> ns3.3db2b.com(443)
1 1 0.0012 (0.0012) C>S Handshake
ClientHello
Version 3.1
resume [32]=
af ea 93 ad 17 8d d2 e7 9a 8d 7f a7 8f a0 8b 17
63 93 33 68 0d 43 99 94 b6 c9 dd e2 f8 17 3d 6f
cipher suites
TLS_RSA_WITH_RC4_128_MD5
TLS_RSA_WITH_RC4_128_SHA
TLS_RSA_WITH_3DES_EDE_CBC_SHA
TLS_RSA_WITH_DES_CBC_SHA
TLS_RSA_EXPORT1024_WITH_RC4_56_SHA
TLS_RSA_EXPORT1024_WITH_DES_CBC_SHA
TLS_RSA_EXPORT_WITH_RC4_40_MD5
TLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5
TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA
TLS_DHE_DSS_WITH_DES_CBC_SHA
TLS_DHE_DSS_EXPORT1024_WITH_DES_CBC_SHA
compression methods
NULL
1 2 0.0056 (0.0043) S>C Handshake
ServerHello
Version 3.1
session_id[32]=
af ea 93 ad 17 8d d2 e7 9a 8d 7f a7 8f a0 8b 17
63 93 33 68 0d 43 99 94 b6 c9 dd e2 f8 17 3d 6f
cipherSuite TLS_RSA_WITH_RC4_128_MD5
compressionMethod NULL
1 3 0.0056 (0.0000) S>C ChangeCipherSpec
1 4 0.0056 (0.0000) S>C Handshake
1 5 0.0068 (0.0011) C>S ChangeCipherSpec
1 6 0.0068 (0.0000) C>S Handshake
1 0.0085 (0.0017) C>S TCP FIN
1 0.0088 (0.0002) S>C TCP FIN
Anything in there indicate an error to anyone?
Thank you again,
Dann Daggett
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
