Re: [RHEL6.2] SSL handshake failure

Mark Montague <mark@xxxxxxxxxxx> · Thu, 15 Mar 2012 13:50:40 -0400

On March 15, 2012 13:31 , Aubrey Li <aubreylee@xxxxxxxxx> wrote:

Thanks for your reply. here is the output of httpd -V. [...]

  -D HTTPD_ROOT="/export/bench/benchmarks/apache2"
  -D SUEXEC_BIN="/export/bench/benchmarks/apache2/bin/suexec"
  -D DEFAULT_PIDLOG="logs/httpd.pid"
  -D DEFAULT_SCOREBOARD="logs/apache_runtime_status"
  -D DEFAULT_ERRORLOG="logs/error_log"
  -D AP_TYPES_CONFIG_FILE="conf/mime.types"
  -D SERVER_CONFIG_FILE="conf/httpd.conf"

I built httpd-2.2.22 on a RHEL6.2 system with SSL enabled. Then I made a
client
to create a connection to httpd but received a handshake failure report.

[...]

When I connect the client to the server(RHEL6.2), there is no
access_log, no err_log,
nothing added in /var/log/messages, it's very weird.

So you are saying that you have a file at 

/export/bench/benchmarks/apache2/conf/httpd.conf that contains all of 

the correct directives to configure SSL, logging, and appropriate 

virtual hosts?

And you are saying that no logs are appearing at 

/export/bench/benchmarks/apache2/logs/error_log nor at the location that 

you specify in your ErrorLog directive in 

/export/bench/benchmarks/apache2/conf/httpd.conf ?

In this case, what user are you starting httpd as?  What are the values 

for the User and Group directives in 

/export/bench/benchmarks/apache2/conf/httpd.conf ? Do that user and 

group have write access to the place you are telling this version of 

httpd to write its error logs?

Is this system running any Mandatory Access Control system such as 

SELinux, AppArmor, Tomoyo, or grsecurity that could be interferring with 

what this version of httpd is trying to do or where it is trying to do 

it?   If so, then check the log files for the Mandatory Access Control 

system that you are running to find out what the problem is.

Hopefully other people on this list will have additional, and better, 

suggestions of things to check.

--
  Mark Montague
  mark@xxxxxxxxxxx

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx