[cobalt-developers] SSL Related : RaQ 3

["Nick Temple" <ntemple@xxxxxxx>]

I'm getting many complaints as well.  Have you found a solution to this?  Does anyone know if it is a problem with OpenSSL/0.9.2b?  Would moving to a Raq4 or XTR, or upgrading Apache/SSL be a solution?

According to the logs, it looks like the use of *.domain.com in th CN could be causing the problem - but this doesn't make sense to me - only the browser should check, and they seem to accept it fine - I'd expect an "invalid certificate error" rather than a failed connection..

Wed Feb  7 06:59:28 2001] [error] mod_ssl: SSL handshake failed (client 164.214.4.62, server store.commercestore.com:443) (OpenSSL library error follows)
[Wed Feb  7 06:59:28 2001] [error] OpenSSL: error:14094412:SSL routines:SSL3_READ_BYTES:sslv3 alert bad certificate [Hint: Subject CN in certificate not server name!?]

Can you tell me if anyone else is using "wildcard" certs, or if that could be the root of problem? I'd prefer not to pay an extra $100+ per second-level domain if I can avoid it, unless that will definately fix the problem

This problem is quickly becoming critical.

Nick

_________

Since I first began using the RaQ3, I've had a high number
of complaints from people who receive access errors
when submitting forms in secure mode (SSL). I noticed there
are two errors in particular that seem to be flooding my
"adm_error" log file. They are:

[Thu May 25 13:00:00 2000] [error] OpenSSL: error:1407609C:SSL
routines:SSL23_GE
T_CLIENT_HELLO:http request [Hint: speaking HTTP to HTTPS port!?]

[Thu May 25 13:15:00 2000] [error] mod_ssl: SSL handshake failed: HTTP
spoken on
 HTTPS port; trying to send HTML error page (OpenSSL library error follows)

The only time I have a problem when doing my own tests is
when a form button stutters. Has anyone else heard this?
A good example is the RaQ admin area where all of the
buttons seem to stutter three times when you click on them.
It's as if you were clicking your mouse button three times
very quickly. From a programming standpoint, I know how
to handle "double-clicks" However, in this case my perl
scripts are never ran, the error occurs before running the
script.

I hope someone can help. Thanks in advance.

Mike Ariano