I have narrowed down the problem. If I add the <certificate-chain-file> option to my <openssl> element in my Resin config, I have problems:
$ openssl s_client -connect localhost:443 CONNECTED(00000003) 21083:error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure:s23_clnt.c:578: If I comment out the <certificate-chain-file> element, then I can successfully make an SSL connection. I don't think I really need the <certificate-chain-file> element but it would be nice to know why Resin is not working with it now when it did before. Ed.Hager wrote: > > I am using Resin Pro. > > This all worked fine under Ubuntu 7.10 with OpenSSL 0.9.8e. I just tried > compiling 0.9.8e under Ubuntu 8.04 and the Java VM crashes when Resin > tries to enable my HTTPS port. I haven't looked at it in detail to see > what is behind that. > > One odd thing... When my copy of Resin opens the HTTPS port using 0.9.8g, > I get a line in the console that states the version of OpenSSL begin used. > On our other (working) systems, there is no output like that. > > That is a good suggestion that I may need to go all the way back to the > "supported" OpenSSL. > > > Rob Lockstone wrote: >> >> Does SSL work without Resin Pro? Do you have Resin Pro? >> >> If you do have Pro, then my experience with Windows/Resin is that it's >> very particular about the version of OpenSSL that it will work with. >> You might need to contact Caucho directly and ask them which version >> of OpenSSL they built the resinssl.dll in 3.0.25 against. >> >> Rob >> >> On Apr 29, 2008, at 18:13 , Ed.Hager wrote: >> >>> >>> I am trying to install Resin 3.0.25 on a machine running Ubuntu 8.04 >>> (the >>> latest Ubuntu). It has OpenSSL 0.9.8g installed. Resin builds and >>> runs but >>> I cannot connect to the HTTPS port I have configured. I tried >>> testing it >>> with openssl: >>> >>> openssl s_client -connect localhost:8443 >>> >>> The SSL handshake fails. Has anyone successfully installed Resin >>> under >>> Ubuntu 8.04 or with OpenSSL 0.9.8g? >>> >>> Ed >>> -- >>> View this message in context: >>> http://www.nabble.com/Resin-3.0.25-and-OpenSSL-0.9.8g-tp16973784p16973784.html >>> Sent from the Resin mailing list archive at Nabble.com. >>> >>> >>> >>> _______________________________________________ >>> resin-interest mailing list >>> resin-interest@caucho.com >>> http://maillist.caucho.com/mailman/listinfo/resin-interest >> >> >> >> _______________________________________________ >> resin-interest mailing list >> resin-interest@caucho.com >> http://maillist.caucho.com/mailman/listinfo/resin-interest >> >> > > -- View this message in context: http://www.nabble.com/Resin-3.0.25-and-OpenSSL-0.9.8g-tp16973784p16975458.html Sent from the Resin mailing list archive at Nabble.com. _______________________________________________ resin-interest mailing list resin-interest@caucho.com http://maillist.caucho.com/mailman/listinfo/resin-interest
