On Fri, Dec 23, 2011 at 12:43:03PM -0300, Larry Letelier wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > On 23/12/11 12:08, Reinaldo Orrego wrote: > > Estimados, > > > > Estoy instalando un servidor web con ssl. > > > > Resumiendo y al grano. > > > > Use la conf por defecto de apache (default-ssl) para crear la > > maquina. Y no esta funcionando. > > > > > > # openssl s_client -servername localhost -connect localhost:443 > > -state -debug CONNECTED(00000003) SSL_connect:before/connect > > initialization write to 0x8459878 [0x845a8e0] (113 bytes => 113 > > (0x71)) 0000 - 16 03 01 00 6c 01 00 00-68 03 01 4e f4 8c d2 ab > > ....l...h..N.... 0010 - ef 6e 26 06 c7 24 b3 e4-f4 30 88 5d 79 4d > > f0 df .n&..$...0.]yM.. 0020 - d4 ab 6d ed ab 2e fb 09-22 c0 b3 00 > > 00 28 00 39 ..m....."....(.9 0030 - 00 38 00 35 00 16 00 13-00 0a > > 00 33 00 32 00 2f .8.5.......3.2./ 0040 - 00 05 00 04 00 15 00 > > 12-00 09 00 14 00 11 00 08 ................ 0050 - 00 06 00 03 00 > > ff 02 01-00 00 16 00 00 00 0e 00 ................ 0060 - 0c 00 00 > > 09 6c 6f 63 61-6c 68 6f 73 74 00 23 ....localhost.# 0071 - > > <SPACES/NULS> SSL_connect:SSLv2/v3 write client hello A read from > > 0x8459878 [0x845fe40] (7 bytes => 7 (0x7)) 0000 - 3c 21 44 4f 43 54 > > 59 <!DOCTY SSL_connect:error in > > SSLv2/v3 read server hello A 17200:error:140770FC:SSL > > routines:SSL23_GET_SERVER_HELLO:unknown protocol:s23_clnt.c:607: > > > > Firefox me da el siguiente mensaje. > > > > Secure Connection Failed > > > > An error occurred during a connection to ws.cap.msgg.gov.cl. > > > > SSL received a record that exceeded the maximum permissible > > length. > > > > (Error code: ssl_error_rx_record_too_long) > > > > The page you are trying to view can not be shown because the > > authenticity of the received data could not be verified. Please > > contact the web site owners to inform them of this problem. > > Alternatively, use the command found in the help menu to report > > this broken site. > > > > En mi /etc/apache2/ports.conf tengo esto > > > > > > NameVirtualHost *:80 Listen 80 > > > > <IfModule mod_ssl.c> # If you add NameVirtualHost *:443 here, you > > will also have to change # the VirtualHost statement in > > /etc/apache2/sites-available/default-ssl # to <VirtualHost *:443> # > > Server Name Indication for SSL named virtual hosts is currently > > not # supported by MSIE on Windows XP. Listen 443 </IfModule> > > > > <IfModule mod_gnutls.c> Listen 443 </IfModule> > > > > Cuando escribo la url:443 me sale un error de not found, en el > > browser. > > > > No tengo muy claro por donde buscar una solución. > > > > Cordialmente > > > Rey, > > Tienes habilitadas las variables ? > > SSLEngine On > SSLCertificateFile /ruta/al/cert/ > > Adicionalmente, que dicen los logs ssl_* de tu apache ?
Encontre el problema. logs de ssl no decian mucho. Para variar problema tonto. Agregar al virtualhost de apache ServerName nombrededominio Ahora esta funcionando. Por lomenos esa parte. Cordialmente -- Reinaldo Orrego n...@quodvis.net
