Koozali.org: home of the SME Server

mod_ssl error

Jens K. Hansen

mod_ssl error
« on: February 13, 2003, 01:05:24 AM »
I  am not able to acces one of my e-smith 5.6 servers through ssl. I get an error everytime. When i look into the sssl log i se the following:
[12/Feb/2003 16:51:54 01197] [info]  Server: Apache/1.3.23, Interface: mod_ssl/2.8.7, Library: OpenSSL/0.9.6b
[12/Feb/2003 16:51:54 01197] [info]  Init: 1st startup round (still not detached)
[12/Feb/2003 16:51:54 01197] [info]  Init: Initializing OpenSSL library
[12/Feb/2003 16:51:54 01197] [info]  Init: Loading certificate & private key of SSL-aware server www.21.lillehammervej.dk:443
[12/Feb/2003 16:51:54 01197] [info]  Init: Loading certificate & private key of SSL-aware server www.home.lillehammervej.dk:443
[12/Feb/2003 16:51:54 01197] [info]  Init: Seeding PRNG with 512 bytes of entropy
[12/Feb/2003 16:51:54 01197] [info]  Init: Generating temporary RSA private keys (512/1024 bits)
[12/Feb/2003 16:52:00 01197] [info]  Init: Configuring temporary DH parameters (512/1024 bits)
[12/Feb/2003 16:52:01 01198] [info]  Init: 2nd startup round (already detached)
[12/Feb/2003 16:52:01 01198] [info]  Init: Reinitializing OpenSSL library
[12/Feb/2003 16:52:01 01198] [info]  Init: Seeding PRNG with 512 bytes of entropy
[12/Feb/2003 16:52:01 01198] [info]  Init: Configuring temporary RSA private keys (512/1024 bits)
[12/Feb/2003 16:52:01 01198] [info]  Init: Configuring temporary DH parameters (512/1024 bits)
[12/Feb/2003 16:52:01 01198] [info]  Init: Initializing (virtual) servers for SSL
[12/Feb/2003 16:52:01 01198] [info]  Init: Configuring server www.21.lillehammervej.dk:443 for SSL protocol
[12/Feb/2003 16:52:01 01198] [warn]  Init: (www.21.lillehammervej.dk:443) RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[12/Feb/2003 16:52:01 01198] [warn]  Init: (www.21.lillehammervej.dk:443) RSA server certificate CommonName (CN) home.lillehammervej.dk' does NOT match server name!?
[12/Feb/2003 16:52:01 01198] [info]  Init: Configuring server www.home.lillehammervej.dk:443 for SSL protocol
[12/Feb/2003 16:52:01 01198] [warn]  Init: (www.home.lillehammervej.dk:443) RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[12/Feb/2003 16:52:01 01198] [warn]  Init: (www.home.lillehammervej.dk:443) RSA server certificate CommonName (CN) home.lillehammervej.dk' does NOT match server name!?
[12/Feb/2003 16:52:01 01198] [warn]  Init: SSL server IP/port conflict: www.home.lillehammervej.dk:443 (/etc/httpd/conf/httpd.conf:623) vs. www.21.lillehammervej.dk:443 (/etc/httpd/conf/httpd.conf:793)
[12/Feb/2003 16:52:01 01198] [warn]  Init: You should not use name-based virtual hosts in conjunction with SSL!!
[12/Feb/2003 22:42:05 01205] [info]  Connection to child 4 established (server www.home.lillehammervej.dk:443, client 10.16.132.4)
[12/Feb/2003 22:42:05 01205] [info]  Seeding PRNG with 1160 bytes of entropy
[12/Feb/2003 22:42:05 01205] [error] SSL handshake failed (server www.home.lillehammervej.dk:443, client 10.16.132.4) (OpenSSL library error follows)
[12/Feb/2003 22:42:05 01205] [error] OpenSSL: error:1408F071:lib(20):func(143):reason(113)
[12/Feb/2003 22:42:05 01206] [info]  Connection to child 5 established (server www.home.lillehammervej.dk:443, client 10.16.132.4)
[12/Feb/2003 22:42:05 01206] [info]  Seeding PRNG with 1160 bytes of entropy
[12/Feb/2003 22:42:05 01206] [error] SSL handshake failed (server www.home.lillehammervej.dk:443, client 10.16.132.4) (OpenSSL library error follows)
[12/Feb/2003 22:42:05 01206] [error] OpenSSL: error:1408F071:lib(20):func(143):reason(113)

Does anyone know what is wrong and how I fix it. Searching the Forums doesn't seem to give any answers
/jens