I have narrowed down the problem. If I add the <certificate-chain-file>
option to my <openssl> element in my Resin config, I have problems:
$ openssl s_client -connect localhost:443
21083:error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert
If I comment out the <certificate-chain-file> element, then I can
successfully make an SSL connection. I don't think I really need the
<certificate-chain-file> element but it would be nice to know why Resin is
not working with it now when it did before.
> I am using Resin Pro.
> This all worked fine under Ubuntu 7.10 with OpenSSL 0.9.8e. I just tried
> compiling 0.9.8e under Ubuntu 8.04 and the Java VM crashes when Resin
> tries to enable my HTTPS port. I haven't looked at it in detail to see
> what is behind that.
> One odd thing... When my copy of Resin opens the HTTPS port using 0.9.8g,
> I get a line in the console that states the version of OpenSSL begin used.
> On our other (working) systems, there is no output like that.
> That is a good suggestion that I may need to go all the way back to the
> "supported" OpenSSL.
> Rob Lockstone wrote:
>> Does SSL work without Resin Pro? Do you have Resin Pro?
>> If you do have Pro, then my experience with Windows/Resin is that it's
>> very particular about the version of OpenSSL that it will work with.
>> You might need to contact Caucho directly and ask them which version
>> of OpenSSL they built the resinssl.dll in 3.0.25 against.
>> On Apr 29, 2008, at 18:13 , Ed.Hager wrote:
>>> I am trying to install Resin 3.0.25 on a machine running Ubuntu 8.04
>>> latest Ubuntu). It has OpenSSL 0.9.8g installed. Resin builds and
>>> runs but
>>> I cannot connect to the HTTPS port I have configured. I tried
>>> testing it
>>> with openssl:
>>> openssl s_client -connect localhost:8443
>>> The SSL handshake fails. Has anyone successfully installed Resin
>>> Ubuntu 8.04 or with OpenSSL 0.9.8g?
>>> View this message in context:
>>> Sent from the Resin mailing list archive at Nabble.com.
>>> resin-interest mailing list
>> resin-interest mailing list
View this message in context:
Sent from the Resin mailing list archive at Nabble.com.
resin-interest mailing list