Hi!
There is a problem with our apache server using modssl/openssl. We use apache 1.3.9,
modssl 2.4.9,
and openssl 0.9.4 on a solaris 2.6 machine. This server is used for an e-commerce side
which gets
between 1000 and 2000 SSL connections each day. The certificate we use is the
GlobalServerID from
Versisign which enables 128bit encryption on all browsers (also on the export
versions).
Several times the day (maybe about 30 times) the handshake between the server and the
clients
fails. Up to now we were not able to find out whether the problem is specific to one
browser because it
looks like this happens with all browsers.
Here is an extract from the errors.log file
[Fri Dec 10 11:02:02 1999] [error] mod_ssl: SSL error on reading data
(OpenSSL library error follows)
[Fri Dec 10 11:02:02 1999] [error] OpenSSL: error:140940E5:
SSL routines:SSL3_READ_BYTES:ssl handshake failure
I didn't find more information in the log files what exactly happens. The browsers
give an error
message saying that they are not able to connect to the side. Unfortunately, this
didn't happen on our
computers up to now. Therefore, I don't know the exact error message.
Does anybody have an idea what the cause for this problem might be? Could it be a
configuration problem
or is it more likely to be a modssl/openssl problem?
I hope somebody is able to help.
Thanks
Tim
