1. Advertising
    y u no do it?

    Advertising (learn more)

    Advertise virtually anything here, with CPM banner ads, CPM email ads and CPC contextual links. You can target relevant areas of the site and show ads based on geographical location of the user if you wish.

    Starts at just $1 per CPM or $0.10 per CPC.

Apache and Virtual IP SSL handshake failed: HTTP spoken on HTTPS port

Discussion in 'Apache' started by colin gray, Oct 16, 2013.

  1. #1
    I have an apache 2.2 server that is having issues handling a SSL request from a Virtual IP. The Virtual IP sends all requests via SSL to a particular port for which I have and is listening. It looks like my apache server (17.16.3.7) is trying to use HTTP to talk to the HTTPS request coming in from the virtual IP address. The ssl_startup_log Error below is when I try do https request to my-virtual-ip-address.com I don't have any issues using http to my-virtual-ip-address.com.
    Any ideas on how to troubleshoot this?

    ssl_startup_log Error:
    [Wed Oct 16 07:49:19 2013] [info] [client 17.16.3.7] Connection to child 0 established (server my-virtual-ip.com:443)
    [Wed Oct 16 07:49:19 2013] [info] Seeding PRNG with 144 bytes of entropy
    [Wed Oct 16 07:49:19 2013] [debug] ssl_engine_kernel.c(1761): OpenSSL: Handshake: start
    [Wed Oct 16 07:49:19 2013] [debug] ssl_engine_kernel.c(1769): OpenSSL: Loop: before/accept initialization
    [Wed Oct 16 07:49:19 2013] [debug] ssl_engine_io.c(1810): OpenSSL: read 11/11 bytes from BIO#2b5ef70f51a0 [mem: 2b5ef70fa860] (BIO dump follows)
    [Wed Oct 16 07:49:19 2013] [debug] ssl_engine_io.c(1757): +-------------------------------------------------------------------------+
    [Wed Oct 16 07:49:19 2013] [debug] ssl_engine_io.c(1782): | 0000: 47 45 54 20 2f 20 48 54-54 50 2f GET / HTTP/ |
    [Wed Oct 16 07:49:19 2013] [debug] ssl_engine_io.c(1788): +-------------------------------------------------------------------------+
    [Wed Oct 16 07:49:19 2013] [debug] ssl_engine_kernel.c(1798): OpenSSL: Exit: error in SSLv2/v3 read client hello A
    [Wed Oct 16 07:49:19 2013] [info] [client 17.16.3.7] SSL handshake failed: HTTP spoken on HTTPS port; trying to send HTML error page
    [Wed Oct 16 07:49:19 2013] [info] SSL Library Error: 336027804 error:1407609C:SSL routines:SSL23_GET_CLIENT_HELLO:http request speaking HTTP to HTTPS port!?
    [Wed Oct 16 07:49:19 2013] [error] [client 17.16.3.7] File does not exist: /myapp/root/errorpage.html


    Here is the initial startup log for apache ssl…everything looks good here to me.
    Startup ssl_error_log:
    [Wed Oct 16 07:53:47 2013] [info] Loading certificate & private key of SSL-aware server
    [Wed Oct 16 07:53:47 2013] [info] Init: Requesting pass phrase via builtin terminal dialog
    [Wed Oct 16 07:53:59 2013] [debug] ssl_engine_pphrase.c(475): encrypted RSA private key - pass phrase requested
    [Wed Oct 16 07:53:59 2013] [info] Configuring server for SSL protocol
    [Wed Oct 16 07:53:59 2013] [debug] ssl_engine_init.c(406): Creating new SSL context (protocols: SSLv3, TLSv1)
    [Wed Oct 16 07:53:59 2013] [debug] ssl_engine_init.c(602): Configuring permitted SSL ciphers [ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM:+LOW]
    [Wed Oct 16 07:53:59 2013] [debug] ssl_engine_init.c(686): Configuring server certificate chain (1 CA certificate)
    [Wed Oct 16 07:53:59 2013] [debug] ssl_engine_init.c(730): Configuring RSA server certificate
    [Wed Oct 16 07:53:59 2013] [debug] ssl_engine_init.c(769): Configuring RSA server private key
    [Wed Oct 16 07:53:59 2013] [info] Loading certificate & private key of SSL-aware server
    [Wed Oct 16 07:53:59 2013] [info] my-virtual-ip.com:443 reusing existing RSA private key on restart
    [Wed Oct 16 07:53:59 2013] [info] Configuring server for SSL protocol
    [Wed Oct 16 07:53:59 2013] [debug] ssl_engine_init.c(406): Creating new SSL context (protocols: SSLv3, TLSv1)
    [Wed Oct 16 07:53:59 2013] [debug] ssl_engine_init.c(602): Configuring permitted SSL ciphers [ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM:+LOW]
    [Wed Oct 16 07:53:59 2013] [debug] ssl_engine_init.c(686): Configuring server certificate chain (1 CA certificate)
    [Wed Oct 16 07:53:59 2013] [debug] ssl_engine_init.c(730): Configuring RSA server certificate
    [Wed Oct 16 07:53:59 2013] [debug] ssl_engine_init.c(769): Configuring RSA server private key
     
    colin gray, Oct 16, 2013 IP
  2. jplimack

    jplimack Greenhorn

    Messages:
    1
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    21
    #2
    did you ever figure out how to fix this?
     
    jplimack, Apr 21, 2014 IP