On Fri, 3 Jun 2005, Robert Zagarello wrote: Oskar, Try to connect to the httpd using the following:openssl s_client -connect youripaddress:443, and let me know if this works (it should spit out normal http) once it's connected. You should get a blank, at which point you should be able to type "get /" and get some SSL output. OpenSSL is the same library that Firefox uses (at least under unix), so that should give you something useful to go on.
Also, have you properly given your PRNG a good entropy source, like an IRQ or something?
-Dan
Oskar, I suspect your firefox test client. Have you tried checking the test client's firefox ssl settings? Does this occur from any firefox client? BZAG =========== Quoting Oskar Eyb <oskar-apache@xxxxxx>:Hello! I have since a few weeks a problem with the ssl-hostand thefirefox-browser. Firefox 1.0.4 (german) - ssl_engine_log ---------------------- [01/Jun/2005 14:29:57 29311] [info] Connection tochild 1 established(server example.net:443, client 84.57.132.209) [01/Jun/2005 14:29:57 29311] [info] Seeding PRNGwith 1160 bytes of entropyThe browser pop-up a message that says, that theconnection was abortedand maybe a part of the data transfered. httpd-error.log --------------- [notice] child pid 1234 exit signal Bus error (10) Accessing with MS Internet Explorer works: - ssl_engine_log -------------------------- [01/Jun/2005 14:29:36 29308] [info] Connection tochild 0 established(server example.net:443, client 84.57.132.209) [01/Jun/2005 14:29:36 29308] [info] Seeding PRNGwith 1160 bytes of entropy[01/Jun/2005 14:29:36 29308] [info] Connection:Client IP:84.57.132.209, Protocol: SSLv3, Cipher: RC4-MD5(128/128 bits)[01/Jun/2005 14:29:36 29308] [info] Initial (No.1)HTTPS requestreceived for child 0 (server example.net:443) [01/Jun/2005 14:29:37 29308] [info] Connection tochild 0 closed withunclean shutdown (server example.net:443, client84.57.132.209)I'm using FreeBSD 5.3 withapache+mod_ssl-1.3.33+2.8.22 (ports)SWAP is used with about 40 MB. PHP + MySQL on thenon non-ssl hostsworks without any problems. Whats wrong? Oskar--------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
-- "this is too stupid even for irc" -mtreal, EFnet #macintosh, 09/15/2K, 12:33 AM --------Dan Mahoney-------- Techie, Sysadmin, WebGeek Gushi on efnet/undernet IRC ICQ: 13735144 AIM: LarpGM Site: http://www.gushi.org --------------------------- --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|