Linux - Server This forum is for the discussion of Linux Software used in a server related context. |
Notices |
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
Are you new to LinuxQuestions.org? Visit the following links:
Site Howto |
Site FAQ |
Sitemap |
Register Now
If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.
Having a problem logging in? Please visit this page to clear all LQ-related cookies.
Get a virtual cloud desktop with the Linux distro that you want in less than five minutes with Shells! With over 10 pre-installed distros to choose from, the worry-free installation life is here! Whether you are a digital nomad or just looking for flexibility, Shells can put your Linux machine on the device that you want to use.
Exclusive for LQ members, get up to 45% off per month. Click here for more info.
|
|
02-24-2011, 09:46 AM
|
#1
|
Senior Member
Registered: Apr 2007
Location: Bangalore, India
Distribution: RHEL,SuSE,CentOS,Fedora,Ubuntu
Posts: 1,386
Rep:
|
ssl error
I have configured SVN with https on suse10, but while accessing through browser it's giving the error as:
PHP Code:
SSL received a record that exceeded the maximum permissible length.
(Error code: ssl_error_rx_record_too_long)
What is causing this error ?
In log its showing this erroe:
Quote:
Invalid method in request \x16\x03\x01
|
|
|
|
02-24-2011, 11:12 AM
|
#2
|
Senior Member
Registered: Jan 2005
Location: Manalapan, NJ
Distribution: Fedora x86 and x86_64, Debian PPC and ARM, Android
Posts: 4,593
|
This is frequently caused by a non-SSL server listening on the port (443, by default). Check the server configuration to confirm the it is properly configured to serve SSL requests on the port.
|
|
|
02-24-2011, 11:43 AM
|
#3
|
LQ Guru
Registered: Jul 2003
Location: Birmingham, Alabama
Distribution: SuSE, RedHat, Slack,CentOS
Posts: 27,331
|
Quote:
Originally Posted by divyashree
I have configured SVN with https on suse10, but while accessing through browser it's giving the error as:
PHP Code:
SSL received a record that exceeded the maximum permissible length.
(Error code: ssl_error_rx_record_too_long)
What is causing this error ?
In log its showing this erroe:
|
Again, Googling for this error would have given you the answer, plus many solutions, if you bothered to try to look.
The openSUSE forums have this, and it's a 'generic' issue with any version of Linux/Apache, all solved the same way.
http://forums.opensuse.org/network-i...ubversion.html
http://ubuntuforums.org/showthread.php?t=974605
|
|
1 members found this post helpful.
|
03-01-2011, 02:39 PM
|
#4
|
Senior Member
Registered: Apr 2007
Location: Bangalore, India
Distribution: RHEL,SuSE,CentOS,Fedora,Ubuntu
Posts: 1,386
Original Poster
Rep:
|
Quote:
Originally Posted by TB0ne
|
I have tried all as said, still the same error received on the browser and log file.
Now with another type of error:
Quote:
Peer's certificate has an invalid signature.
(Error code: sec_error_bad_signature)
|
Last edited by divyashree; 03-01-2011 at 02:48 PM.
|
|
|
03-01-2011, 02:56 PM
|
#5
|
Senior Member
Registered: Apr 2007
Location: Bangalore, India
Distribution: RHEL,SuSE,CentOS,Fedora,Ubuntu
Posts: 1,386
Original Poster
Rep:
|
It's giving an error in log file as:
Quote:
SSL Library Error: 336151570 error:14094412:SSL routines:SSL3_READ_BYTES:sslv3 alert bad certificate Subject CN in certificate not server name or identical to CA!?
|
I want to ask, wheather the CN of CA and server crt be same ?
|
|
|
03-01-2011, 03:16 PM
|
#6
|
Senior Member
Registered: Apr 2007
Location: Bangalore, India
Distribution: RHEL,SuSE,CentOS,Fedora,Ubuntu
Posts: 1,386
Original Poster
Rep:
|
Oh I did this....closed.....
I got this on log
Quote:
==> /var/log/apache2/svn-access_log <==
192.168.0.100 - - [02/Mar/2011:01:47:22 +0530] "GET /vizrepos/ HTTP/1.1" 200 427
==> /var/log/apache2/svn-error_log <==
[Wed Mar 02 01:47:22 2011] [info] [client 192.168.0.100] Connection to child 0 established (server 192.168.0.3:443)
[Wed Mar 02 01:47:22 2011] [info] Seeding PRNG with 144 bytes of entropy
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_kernel.c(1752): OpenSSL: Handshake: start
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_kernel.c(1760): OpenSSL: Loop: before/accept initialization
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1775): OpenSSL: read 11/11 bytes from BIO#5555562e00e0 [mem: 5555562e57a0] (BIO dump follows)
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1722): +-------------------------------------------------------------------------+
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1747): | 0000: 16 03 01 00 a9 01 00 00-a5 03 01 ........... |
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1753): +-------------------------------------------------------------------------+
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1775): OpenSSL: read 163/163 bytes from BIO#5555562e00e0 [mem: 5555562e57ab] (BIO dump follows)
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1722): +-------------------------------------------------------------------------+
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1747): | 0000: 4d 6d 54 55 f1 ee ce 98-e3 3b 91 b4 13 2e db c8 MmTU.....;...... |
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1747): | 0010: e7 26 26 80 67 48 0d ac-e5 1b 60 9a 54 08 5e 2d .&&.gH....`.T.^- |
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1747): | 0020: 20 f3 06 75 03 67 b8 69-b3 ad 70 ef f1 7f 6f 7b ..u.g.i..p...o{ |
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1747): | 0030: ff 0c 72 81 e6 25 f4 1c-8d 9c a4 5f 11 31 78 b9 ..r..%....._.1x. |
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1747): | 0040: fb 00 1a 00 ff 00 39 00-38 00 35 00 33 00 32 00 ......9.8.5.3.2. |
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1747): | 0050: 04 00 05 00 2f 00 16 00-13 fe ff 00 0a 01 00 00 ..../........... |
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1747): | 0060: 42 00 0a 00 34 00 32 00-01 00 02 00 03 00 04 00 B...4.2......... |
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1747): | 0070: 05 00 06 00 07 00 08 00-09 00 0a 00 0b 00 0c 00 ................ |
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1747): | 0080: 0d 00 0e 00 0f 00 10 00-11 00 12 00 13 00 14 00 ................ |
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1747): | 0090: 15 00 16 00 17 00 18 00-19 00 0b 00 02 01 00 00 ................ |
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1747): | 00a0: 23 # |
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1751): | 0163 - <SPACES/NULS>
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1753): +-------------------------------------------------------------------------+
[Wed Mar 02 01:47:22 2011] [debug] ssl_scache_shmcb.c(720): inside shmcb_retrieve_session
[Wed Mar 02 01:47:22 2011] [debug] ssl_scache_shmcb.c(732): id[0]=243, masked index=19
[Wed Mar 02 01:47:22 2011] [debug] ssl_scache_shmcb.c(1195): entering shmcb_lookup_session_id
[Wed Mar 02 01:47:22 2011] [debug] ssl_scache_shmcb.c(983): entering shmcb_expire_division
[Wed Mar 02 01:47:22 2011] [debug] ssl_scache_shmcb.c(1205): loop=0, count=1, curr_pos=0
[Wed Mar 02 01:47:22 2011] [debug] ssl_scache_shmcb.c(1209): idx->s_id2=6, id[1]=6, offset=0
[Wed Mar 02 01:47:22 2011] [debug] ssl_scache_shmcb.c(1226): at index 0, found possible session match
[Wed Mar 02 01:47:22 2011] [debug] ssl_scache_shmcb.c(1245): a match!
[Wed Mar 02 01:47:22 2011] [debug] ssl_scache_shmcb.c(748): leaving shmcb_retrieve_session
[Wed Mar 02 01:47:22 2011] [debug] ssl_scache_shmcb.c(435): shmcb_retrieve had a hit
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_kernel.c(1598): Inter-Process Session Cache: request=GET status=FOUND id=F306750367B869B3AD70EFF17F6F7BFF0C7281E625F41C8D9CA45F113178B9FB (session reuse)
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_kernel.c(1760): OpenSSL: Loop: SSLv3 read client hello A
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_kernel.c(1760): OpenSSL: Loop: SSLv3 write server hello A
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_kernel.c(1760): OpenSSL: Loop: SSLv3 write change cipher spec A
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_kernel.c(1760): OpenSSL: Loop: SSLv3 write finished A
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_kernel.c(1760): OpenSSL: Loop: SSLv3 flush data
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1775): OpenSSL: read 5/5 bytes from BIO#5555562e00e0 [mem: 5555562e57a0] (BIO dump follows)
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1722): +-------------------------------------------------------------------------+
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1747): | 0000: 14 03 01 00 01 ..... |
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1753): +-------------------------------------------------------------------------+
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1775): OpenSSL: read 1/1 bytes from BIO#5555562e00e0 [mem: 5555562e57a5] (BIO dump follows)
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1722): +-------------------------------------------------------------------------+
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1747): | 0000: 01 . |
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1753): +-------------------------------------------------------------------------+
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1775): OpenSSL: read 5/5 bytes from BIO#5555562e00e0 [mem: 5555562e57a0] (BIO dump follows)
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1722): +-------------------------------------------------------------------------+
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1747): | 0000: 16 03 01 00 30 ....0 |
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1753): +-------------------------------------------------------------------------+
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1775): OpenSSL: read 48/48 bytes from BIO#5555562e00e0 [mem: 5555562e57a5] (BIO dump follows)
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1722): +-------------------------------------------------------------------------+
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1747): | 0000: ab f1 f1 14 d2 b1 f0 86-a5 bb 0d b3 9e 46 89 46 .............F.F |
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1747): | 0010: e2 56 ef 89 3f db bf e1-ad a8 40 15 47 0d fe b2 .V..?.....@.G... |
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1747): | 0020: e6 85 6f 9c ce 7e b8 b4-57 95 ee 6f c3 a6 83 3f ..o..~..W..o...? |
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1753): +-------------------------------------------------------------------------+
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_kernel.c(1760): OpenSSL: Loop: SSLv3 read finished A
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_kernel.c(1756): OpenSSL: Handshake: done
[Wed Mar 02 01:47:22 2011] [info] Connection: Client IP: 192.168.0.100, Protocol: TLSv1, Cipher: DHE-RSA-AES256-SHA (256/256 bits)
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1775): OpenSSL: read 5/5 bytes from BIO#5555562e00e0 [mem: 5555562e57a0] (BIO dump follows)
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1722): +-------------------------------------------------------------------------+
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1747): | 0000: 17 03 01 01 e0 ..... |
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1753): +-------------------------------------------------------------------------+
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1775): OpenSSL: read 480/480 bytes from BIO#5555562e00e0 [mem: 5555562e57a5] (BIO dump follows)
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1722): +-------------------------------------------------------------------------+
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1747): | 0000: 8f 95 df 64 80 89 0b 2d-5d af 32 74 72 a3 8a 5e ...d...-].2tr..^ |
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1747): | 0010: 26 ac 62 44 9f 58 4b db-2a 68 dd 9a 71 3f 6d 0f &.bD.XK.*h..q?m. |
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1747): | 0020: 19 57 fe ca 98 93 ba a8-bd 50 5e ce 77 1b 49 8a .W.......P^.w.I. |
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1747): | 0030: f1 8b e4 71 34 b3 75 08-ad 49 a8 88 54 16 23 b0 ...q4.u..I..T.#. |
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1747): | 0040: 42 17 1c d5 80 73 97 11-66 9e bd 56 46 f2 17 1b B....s..f..VF... |
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1747): | 0050: 10 98 66 45 a0 71 07 8f-87 e6 8a 18 d6 5f e0 96 ..fE.q......._.. |
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1747): | 0060: e8 33 31 a1 58 f7 e7 a7-e1 1b 04 31 3a d6 19 88 .31.X......1:... |
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1747): | 0070: 5b 1b 27 4a 90 72 0e da-56 d2 91 09 12 b8 f9 5e [.'J.r..V......^ |
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1747): | 0080: 3b e4 88 60 90 17 05 03-86 3d e6 fc 07 a1 53 08 ;..`.....=....S. |
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1747): | 0090: 26 da f1 4d 5c 2a d7 bb-be c6 51 f8 7f 8b 00 46 &..M\\*....Q....F |
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1747): | 00a0: 19 10 a9 8c de 86 b7 fb-67 41 9b 89 a0 4f d0 bf ........gA...O.. |
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1747): | 00b0: b6 b9 50 92 f8 a9 20 9c-d1 d7 ab e7 f0 77 c1 0e ..P... ......w.. |
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1747): | 00c0: a1 a0 01 c4 c6 c2 41 b8-b0 fc 95 e3 e6 22 5b f2 ......A......"[. |
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1747): | 00d0: 04 4a 5f 95 1c 52 a9 91-19 64 bb 73 3a 05 42 e4 .J_..R...d.s:.B. |
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1747): | 00e0: 75 8c 90 68 ed 00 ec 0a-46 18 0b 68 fb 3f fa d8 u..h....F..h.?.. |
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1747): | 00f0: f6 b9 df 25 ad 85 c2 9e-45 a5 4c 89 f8 38 f0 be ...%....E.L..8.. |
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1747): | 0100: 0d bf 99 79 3f d8 b5 84-9b 0c c4 ea c0 7d 37 cb ...y?........}7. |
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1747): | 0110: a6 06 05 a2 bd 04 4f 22-61 f7 8c 0e 8e 7d 19 0f ......O"a....}.. |
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1747): | 0120: 85 26 79 94 7f 52 e8 55-6e 64 4f f1 13 42 b9 7a .&y..R.UndO..B.z |
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1747): | 0130: e2 2c c4 c9 41 f0 8a cb-78 dc 84 20 17 d2 86 dd .,..A...x.. .... |
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1747): | 0140: 19 41 17 2d 35 61 3f bc-90 b9 c0 b9 6c 7f 7c c2 .A.-5a?.....l.|. |
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1747): | 0150: f9 6e 61 50 5a 46 07 9e-9b f8 c8 4d 4f 0b 48 02 .naPZF.....MO.H. |
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1747): | 0160: 39 ca 1c 1c ac a5 1e 18-40 60 96 55 ab 99 48 8a 9.......@`.U..H. |
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1747): | 0170: d5 4d de af 8a 1e 9d c4-51 2e a8 26 1a 7b e7 55 .M......Q..&.{.U |
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1747): | 0180: 14 3a aa cf 40 c5 9d 41-d0 1c 79 cc 92 cc 70 5c .:..@..A..y...p\\ |
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1747): | 0190: 63 b0 a9 00 e7 40 3a 07-be 42 79 aa 2e a9 09 17 c....@:..By..... |
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1747): | 01a0: c0 7d 2f 3f b8 c2 51 d6-4c b7 f0 f7 ac 1d d0 f4 .}/?..Q.L....... |
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1747): | 01b0: e5 a8 4d b4 f5 43 f5 7e-f8 f1 67 f1 78 0e dd 73 ..M..C.~..g.x..s |
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1747): | 01c0: 10 de d9 cd fa ee cc 91-15 ab 9a 99 4a 40 df d1 ............J@.. |
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1747): | 01d0: 82 fb 05 5c 3b 1c 89 ab-d7 93 75 da 8b 6b cf 11 ...\\;.....u..k.. |
[Wed Mar 02 01:47:22 2011] [debug] ssl_engine_io.c(1753): +-------------------------------------------------------------------------+
[Wed Mar 02 01:47:22 2011] [info] Initial (No.1) HTTPS request received for child 0 (server 192.168.0.3:443)
[Wed Mar 02 01:47:37 2011] [debug] ssl_engine_io.c(1786): OpenSSL: I/O error, 5 bytes expected to read on BIO#5555562e00e0 [mem: 5555562e57a0]
[Wed Mar 02 01:47:37 2011] [info] [client 192.168.0.100] (70007)The timeout specified has expired: SSL input filter read failed.
[Wed Mar 02 01:47:37 2011] [debug] ssl_engine_kernel.c(1770): OpenSSL: Write: SSL negotiation finished successfully
[Wed Mar 02 01:47:37 2011] [info] [client 192.168.0.100] Connection closed to child 0 with standard shutdown (server 192.168.0.3:443)
|
Last edited by divyashree; 03-01-2011 at 03:19 PM.
|
|
|
03-01-2011, 03:20 PM
|
#7
|
Senior Member
Registered: Apr 2007
Location: Bangalore, India
Distribution: RHEL,SuSE,CentOS,Fedora,Ubuntu
Posts: 1,386
Original Poster
Rep:
|
TBone , You are truly a guru..
|
|
|
03-01-2011, 06:20 PM
|
#8
|
LQ Guru
Registered: Jul 2003
Location: Birmingham, Alabama
Distribution: SuSE, RedHat, Slack,CentOS
Posts: 27,331
|
Quote:
Originally Posted by divyashree
TBone , You are truly a guru..
|
Don't need to be a 'guru' to fix alot of your questions...just need to look up the answers.
|
|
|
All times are GMT -5. The time now is 09:55 AM.
|
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know.
|
Latest Threads
LQ News
|
|