hi,
i'm seeing a browser-specific ssl error that i'm not clear is due to
openssl, mod_ssl, or apache? or my own config ... ?
hoping someone here might spare a look at my info/speculations below & comment.
i've installed
apache2-2.2.11-10.1
apache2-worker-2.2.11-10.1
from openSUSE 11.1 repos,
http://download.opensuse.org/repositories/Apache/openSUSE_11.1
i've installed Drupal 6.13 in a subdir, running under Apache w/mod_ssl, i.e. @
https://www.mydomain.net/main/
just about everything works fine / as expected, except ...
when attempting to make changes to a sinlge/specific Drupal theme
(fwiw, "Acquia Marina), i'm getting fatal errors:
Secure Connection Failed
An error occurred during a connection to www.mydomain.net.
SSL peer was not expecting a handshake message it received.
(Error code: ssl_error_handshake_unexpected_alert)
the problem occurs, fatally, only in Firefox/OSX, _not_ in Safari/OSX.
it's 100% reproducible on similarly configured servers, with fresh
installs of Apache & Drupal 6.13.
i've posted debug-level apache logs for the cases of:
(A) Firefox -> http://pastebin.com/f472b380c
(B) Safari -> http://pastebin.com/f19c4c1e7
possibly (?) relevant are:
my original notice:
"changes to acquia_marina theme config fail when site runs under SSL."
http://drupal.org/node/510970
a Suhosin dependence?:
"Can't change theme configuration with some modules enabled"
http://drupal.org/node/324085
an apache bug that shares 'SSL renegotiation' and Firefox dependence:
"ssl renegotiation hangs with long ca list"
https://issues.apache.org/bugzilla/show_bug.cgi?id=46952
with a purported, mod_ssl-only "fix", committed in apache /trunk,
http://svn.apache.org/viewvc?view=rev&revision=788715
and,
http://svn.apache.org/viewvc?view=rev&revision=726109
the problem sure _seems_ SSL-related, but as to the root cause, and
any possible fix ... ? a bug in mod_ssl? my SSL config? other?
happy to provide add'l info, once clear what's helpful. any
insights/suggestions are appreciated.
thanks!
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [email protected]
Automated List Manager [email protected]
