apache24 ssl setup problems; "unknown protocol"

Gary Aitken freebsd at dreamchaser.org
Sat Mar 31 22:20:50 UTC 2018


Hi all,

I'm trying to set up apache24 ssl for the first time; getting nowhere
very slowly.

Server starts up ok, serves port 80 normally as usual.
sockstat shows it listening on 443 ok.

When I attempt to connect I get this:

$ openssl s_client -connect 192.168.151.101:443
CONNECTED(00000003)
34379279064:error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol:/usr/src/secure/lib/libssl/../../../crypto/openssl/ssl/s23_clnt.c:782:
---
no peer certificate available
---
No client certificate CA names sent
---
SSL handshake has read 7 bytes and written 291 bytes
---
New, (NONE), Cipher is (NONE)
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
SSL-Session:
     Protocol  : TLSv1.2
     Cipher    : 0000
     Session-ID:
     Session-ID-ctx:
     Master-Key:
     Key-Arg   : None
     PSK identity: None
     PSK identity hint: None
     SRP username: None
     Start Time: 1522531949
     Timeout   : 300 (sec)
     Verify return code: 0 (ok)

I assume the problem is the unknown protocol issue, but it's not clear
to me what the unknown protocol it's looking for is.
My extra/httpd-ssl.conf says:
   SSLProtocol all -SSLv3
and my extra/httpd-vhosts.conf does not override it.
The error log simply says:
    [core:debug] [pid 13758] protocol.c(1272): ... : request failed: malformed request line

Running apache24-2.4.25_1 on a 10.3 amd64

Thanks,

Gary



More information about the freebsd-questions mailing list