Mailing-List: contact users-help@trafficserver.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@trafficserver.apache.org
Received-SPF: error (nike.apache.org: local policy)
Content-Type: text/plain; charset=us-ascii
Mime-Version: 1.0 (Mac OS X Mail 6.5 \(1508\))
Subject: Re: ssl termination does not work
From: Leif Hedstrom <zwoop@apache.org>
In-Reply-To: <52018CA9.9030703@thelounge.net>
Date: Wed, 7 Aug 2013 05:45:00 +0200
Content-Transfer-Encoding: quoted-printable
Message-Id: <D9304CD2-B5C8-4EB6-9715-FFC86AE916E0@apache.org>
References: <52018CA9.9030703@thelounge.net>
To: users@trafficserver.apache.org

On Aug 7, 2013, at 1:54 AM, Reindl Harald <h.reindl@thelounge.net> =
wrote:

> Hi
>=20
> anybody an idea what's wrong here?
> see errors from "traffic.out" blow
> trafficserver-3.2.5-3.fc19.20130803.rh.x86_64
>=20
> finally i want paly around with having apache only on 127.0.0.1
> without mod_ssl and trafficserver making the ssl-termination, in
> the first step ip-based like httpd and if possible finally with
> SNI for more than one vhost, well but i do not get the basics work
>=20
> Firefox:
> An error occurred during a connection to rhsoft.testserver.
> Cannot communicate securely with peer: no common encryption =
algorithm(s).
> (Error code: ssl_error_no_cypher_overlap)

I've typically seen these types of errors if no certificates are loaded. =
Maybe check your logs, and/or run it with a Diags tracer of "ssl" =
(without quotes) and see if it can give you any details.

-- Leif