httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "John P. Dodge" <do...@cruciate.ca.boeing.com>
Subject RE: [users@httpd] SSL error
Date Wed, 14 Apr 2004 18:38:59 GMT
On Wed, 14 Apr 2004, Gold, Samuel (Contractor) wrote:

> I have all of my certs in that directory.  This is just a test set up.
>
> -----Original Message-----
> From: John P. Dodge [mailto:dodge@cruciate.ca.boeing.com]
> Sent: Wednesday, April 14, 2004 11:19 AM
> To: 'users@httpd.apache.org'
> Subject: Re: [users@httpd] SSL error
>
>
> On Wed, 14 Apr 2004, Gold, Samuel (Contractor) wrote:
>
> > Hey all,
> >
> > I am having some issues with Apache and SSL.  I have done some
> > searching on google and have not been able to find any answers.  If
> > there is a better place to post this issue please let me know.  In my
> > error log I get this error and I am not sure what exactly it means.
> > [debug] ssl_engine_kernel.c(1762): OpenSSL: Write: SSLv3 read client
> > certificate B [debug] ssl_engine_kernel.c(1781): OpenSSL: Exit: error
> > in SSLv3 read client certificate B
> > [debug] ssl_engine_kernel.c(1781): OpenSSL: Exit: error in SSLv3 read
> client
> > certificate B
> > [info] SSL library error 1 in handshake (server www.mysslsite.mil:443,
> > client 123.23.23.23)
> > [info] SSL Library Error: 336105671 error:140890C7:SSL
> > routines:SSL3_GET_CLIENT_CERTIFICATE:peer did not return a certificate No
> > CAs known to server for verification?
> >
>
> What is in the directory specified in the directive:
>
> SSLCACertificatePath /local/www2/conf/
>
> Do you have your CA root/chain certs in this dir?
>
>

Well, are you sure the client is sending a cert?

You could try

SSLLogLevel trace

or

SSLLogLevel debug


This will dump a lot of output in the log file (logs/ssl_engine_log I
think).


----------------------------------------
"Mon aƩroglisseur est plein d'anguilles"
John P. Dodge
Boeing Shared Services


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message