The client is hitting a URL which is secured. Client side certificate is used for authentication. But the request does not reach the application. The certificate seems correct but the request gets stucked in between. I checked other questions which suggested to check if the URL is https and not http. I checked it and the URL on which the request is sent is HTTPS itself, but still receiving the error. Below are the apache logs :
[Thu May 04 17:52:17 2017] [debug] ssl_engine_kernel.c(1911): OpenSSL: Loop: SSLv3 flush data
[Thu May 04 17:52:17 2017] [debug] ssl_scache_shmcb.c(353): ssl_scache_shmcb_store (0xcd -> subcache 13)
[Thu May 04 17:52:17 2017] [debug] ssl_scache_shmcb.c(645): insert happened at idx=0, data=0
[Thu May 04 17:52:17 2017] [debug] ssl_scache_shmcb.c(647): finished insert, subcache: idx_pos/idx_used=0/1, data_pos/data_used=0/177
[Thu May 04 17:52:17 2017] [debug] ssl_scache_shmcb.c(378): leaving ssl_scache_shmcb_store successfully
[Thu May 04 17:52:17 2017] [debug] ssl_engine_kernel.c(1769): Inter-Process Session Cache: request=SET status=OK id=CD810458B34D865C3743B595016AE79FCA370D30AA839F4746446AA6A5319FDD timeout=300s (session caching)
[Thu May 04 17:52:17 2017] [debug] ssl_engine_kernel.c(1907): OpenSSL: Handshake: done
[Thu May 04 17:52:17 2017] [info] Connection: Client IP: 62.12.14.28, Protocol: TLSv1.2, Cipher: ECDHE-RSA-AES256-SHA384 (256/256 bits)
[Thu May 04 17:52:17 2017] [debug] ssl_engine_io.c(1939): OpenSSL: read 5/5 bytes from BIO#14f070 [mem: 136e7b] (BIO dump follows)
[Thu May 04 17:52:17 2017] [debug] ssl_engine_io.c(1872): +-------------------------------------------------------------------------+
[Thu May 04 17:52:17 2017] [debug] ssl_engine_io.c(1911): | 0000: 17 03 03 01 90 ..... |
[Thu May 04 17:52:17 2017] [debug] ssl_engine_io.c(1917): +-------------------------------------------------------------------------+
[Thu May 04 17:52:17 2017] [debug] ssl_engine_io.c(1939): OpenSSL: read 400/400 bytes from BIO#14f070 [mem: 136e80] (BIO dump follows)
[Thu May 04 17:52:17 2017] [debug] ssl_engine_io.c(1872): +-------------------------------------------------------------------------+
[Thu May 04 17:52:17 2017] [debug] ssl_engine_io.c(1911): | 0000: 63 2f 9f 93 d3 34 2b ba-21 dc ef de 32 b5 f4 82 c/...4+.!...2... |
[Thu May 04 17:52:17 2017] [debug] ssl_engine_io.c(1911): | 0180: 57 e6 74 2c b5 b2 7e 77-aa 01 3f 49 61 39 9e 91 W.t,..~w..?Ia9.. |
[Thu May 04 17:52:17 2017] [debug] ssl_engine_io.c(1917): +-------------------------------------------------------------------------+
[Thu May 04 17:52:17 2017] [info] Initial (No.1) HTTPS request received for child 4 (server acc-b2b.kpn-wholesale.com:443)
[Thu May 04 17:52:17 2017] [debug] ssl_engine_kernel.c(500): [client 62.12.14.28] Changed client verification type will force renegotiation
[Thu May 04 17:52:17 2017] [debug] ssl_engine_io.c(1596): [client 62.12.14.28] filling buffer, max size 131072 bytes
[Thu May 04 17:52:17 2017] [debug] ssl_engine_kernel.c(1911): OpenSSL: Loop: SSLv3 flush data
[Thu May 04 17:52:17 2017] [debug] ssl_scache_shmcb.c(353): ssl_scache_shmcb_store (0xcd -> subcache 13)
[Thu May 04 17:52:17 2017] [debug] ssl_scache_shmcb.c(645): insert happened at idx=0, data=0
[Thu May 04 17:52:17 2017] [debug] ssl_scache_shmcb.c(647): finished insert, subcache: idx_pos/idx_used=0/1, data_pos/data_used=0/177
[Thu May 04 17:52:17 2017] [debug] ssl_scache_shmcb.c(378): leaving ssl_scache_shmcb_store successfully
[Thu May 04 17:52:17 2017] [debug] ssl_engine_kernel.c(1769): Inter-Process Session Cache: request=SET status=OK id=CD810458B34D865C3743B595016AE79FCA370D30AA839F4746446AA6A5319FDD timeout=300s (session caching)
[Thu May 04 17:52:17 2017] [debug] ssl_engine_kernel.c(1907): OpenSSL: Handshake: done
[Thu May 04 17:52:17 2017] [info] Connection: Client IP: 62.12.14.28, Protocol: TLSv1.2, Cipher: ECDHE-RSA-AES256-SHA384 (256/256 bits)
[Thu May 04 17:52:17 2017] [debug] ssl_engine_io.c(1939): OpenSSL: read 5/5 bytes from BIO#14f070 [mem: 136e7b] (BIO dump follows)
[Thu May 04 17:52:17 2017] [debug] ssl_engine_io.c(1872): +-------------------------------------------------------------------------+
[Thu May 04 17:52:17 2017] [debug] ssl_engine_io.c(1911): | 0000: 17 03 03 01 90 ..... |
[Thu May 04 17:52:17 2017] [debug] ssl_engine_io.c(1917): +-------------------------------------------------------------------------+
[Thu May 04 17:52:17 2017] [debug] ssl_engine_io.c(1939): OpenSSL: read 400/400 bytes from BIO#14f070 [mem: 136e80] (BIO dump follows)
[Thu May 04 17:52:17 2017] [debug] ssl_engine_io.c(1872): +-------------------------------------------------------------------------+
[Thu May 04 17:52:17 2017] [debug] ssl_engine_io.c(1911): | 0000: 63 2f 9f 93 d3 34 2b ba-21 dc ef de 32 b5 f4 82 c/...4+.!...2... |
[Thu May 04 17:52:17 2017] [debug] ssl_engine_io.c(1911): | 0180: 57 e6 74 2c b5 b2 7e 77-aa 01 3f 49 61 39 9e 91 W.t,..~w..?Ia9.. |
[Thu May 04 17:52:17 2017] [debug] ssl_engine_io.c(1917): +-------------------------------------------------------------------------+
[Thu May 04 17:52:17 2017] [info] Initial (No.1) HTTPS request received for child 4 (server acc-b2b.kpn-wholesale.com:443)
[Thu May 04 17:52:17 2017] [debug] ssl_engine_kernel.c(500): [client 62.12.14.28] Changed client verification type will force renegotiation
[Thu May 04 17:52:17 2017] [debug] ssl_engine_io.c(1596): [client 62.12.14.28] filling buffer, max size 131072 bytes
[Thu May 04 17:54:39 2017] [debug] ssl_engine_kernel.c(1940): OpenSSL: Exit: error in SSLv2/v3 read client hello A
[Thu May 04 17:54:39 2017] [info] [client 145.7.219.13] SSL handshake failed: HTTP spoken on HTTPS port; trying to send HTML error page
[Thu May 04 17:54:39 2017] [info] SSL Library Error: 336027804 error:1407609C:SSL routines:SSL23_GET_CLIENT_HELLO:http request speaking HTTP to HTTPS port!?
[Thu May 04 17:54:47 2017] [debug] ssl_engine_io.c(1950): OpenSSL: I/O error, 5 bytes expected to read on BIO#14f070 [mem: 136e7b]
[Thu May 04 17:54:47 2017] [info] [client 62.12.14.28] (70007)The timeout specified has expired: SSL input filter read failed.
[Thu May 04 17:54:47 2017] [error] [client 62.12.14.28] (70007)The timeout specified has expired: could not read request body for SSL buffer
[Thu May 04 17:54:47 2017] [error] [client 62.12.14.28] could not buffer message body to allow SSL renegotiation to proceed
[Thu May 04 17:54:47 2017] [debug] ssl_engine_kernel.c(1921): OpenSSL: Write: SSL negotiation finished successfully
Related
I have open stack running and it was working fine I've rebooted and since have been unable to restart httpd
[root#h30 ~]# systemctl status httpd.service
● httpd.service - The Apache HTTP Server
Loaded: loaded (/usr/lib/systemd/system/httpd.service; enabled; vendor preset: disabled)
Drop-In: /usr/lib/systemd/system/httpd.service.d
└─openstack-dashboard.conf
Active: failed (Result: exit-code) since Thu 2016-09-01 14:11:07 BST; 2min 13s ago
Docs: man:httpd(8)
man:apachectl(8)
Process: 10030 ExecStop=/bin/kill -WINCH ${MAINPID} (code=exited, status=1/FAILURE)
Process: 10027 ExecStart=/usr/sbin/httpd $OPTIONS -DFOREGROUND (code=exited, status=1/FAILURE)
Process: 9944 ExecStartPre=/usr/bin/python /usr/share/openstack-dashboard/manage.py compress --force (code=exited, status=0/SUCCESS)
Process: 9919 ExecStartPre=/usr/bin/python /usr/share/openstack-dashboard/manage.py collectstatic --noinput --clear (code=exited, status=0/SUCCESS)
Main PID: 10027 (code=exited, status=1/FAILURE)
Sep 01 14:10:46 h30 python[9919]: Copying '/usr/lib/python2.7/site-packages/horizon/static/framework/widgets/help-panel/help...ive.js'
Sep 01 14:10:46 h30 python[9919]: Copying '/usr/lib/python2.7/site-packages/horizon/static/framework/widgets/help-panel/help...pec.js'
Sep 01 14:10:46 h30 python[9919]: Copying '/usr/lib/python2.7/site-packages/horizon/static/framework/widgets/help-panel/help...l.html'
Sep 01 14:10:46 h30 python[9919]: Copying '/usr/lib/python2.7/site-packages/horizon/static/framework/widgets/help-panel/help...ule.js'
Sep 01 14:10:46 h30 python[9919]: Copying '/usr/lib/python2.7/site-packages/horizon/static/framework/widgets/help-panel/help...pec.js'
Sep 01 14:11:07 h30 systemd[1]: httpd.service: main process exited, code=exited, status=1/FAILURE
Sep 01 14:11:07 h30 systemd[1]: httpd.service: control process exited, code=exited status=1
Sep 01 14:11:07 h30 systemd[1]: Failed to start The Apache HTTP Server.
Sep 01 14:11:07 h30 systemd[1]: Unit httpd.service entered failed state.
Sep 01 14:11:07 h30 systemd[1]: httpd.service failed.
Hint: Some lines were ellipsized, use -l to show in full.
and I have no idea whats causing the issue to be honest, any help would be great.
Here is the error log
[Wed Aug 31 17:23:03.796739 2016] [core:notice] [pid 4346] AH00094: Command line: '/usr/sbin/httpd -D FOREGROUND'
[Wed Aug 31 17:23:06.653781 2016] [mpm_prefork:notice] [pid 4346] AH00170: caught SIGWINCH, shutting down gracefully
[Wed Aug 31 17:23:31.884455 2016] [core:notice] [pid 7547] SELinux policy enabled; httpd running as context system_u:system_r:httpd_t:s0
[Wed Aug 31 17:23:31.885805 2016] [suexec:notice] [pid 7547] AH01232: suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
[Wed Aug 31 17:23:31.902192 2016] [so:warn] [pid 7547] AH01574: module php5_module is already loaded, skipping
[Wed Aug 31 17:23:31.902233 2016] [so:warn] [pid 7547] AH01574: module wsgi_module is already loaded, skipping
[Wed Aug 31 17:23:31.905613 2016] [auth_digest:notice] [pid 7547] AH01757: generating secret for digest authentication ...
[Wed Aug 31 17:23:32.100865 2016] [mpm_prefork:notice] [pid 7547] AH00163: Apache/2.4.6 (CentOS) PHP/5.4.16 mod_wsgi/3.4 Python/2.7.5 configured -- resuming normal operations
[Wed Aug 31 17:23:32.100922 2016] [core:notice] [pid 7547] AH00094: Command line: '/usr/sbin/httpd -D FOREGROUND'
[Wed Aug 31 18:35:11.515126 2016] [mpm_prefork:notice] [pid 7547] AH00170: caught SIGWINCH, shutting down gracefully
[Wed Aug 31 19:22:27.955740 2016] [core:notice] [pid 17956] SELinux policy enabled; httpd running as context system_u:system_r:httpd_t:s0
[Wed Aug 31 19:22:27.968206 2016] [suexec:notice] [pid 17956] AH01232: suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
[Wed Aug 31 19:22:27.984913 2016] [so:warn] [pid 17956] AH01574: module php5_module is already loaded, skipping
[Wed Aug 31 19:22:27.984949 2016] [so:warn] [pid 17956] AH01574: module wsgi_module is already loaded, skipping
[Wed Aug 31 19:22:27.988204 2016] [auth_digest:notice] [pid 17956] AH01757: generating secret for digest authentication ...
[Wed Aug 31 19:22:28.303754 2016] [mpm_prefork:notice] [pid 17956] AH00163: Apache/2.4.6 (CentOS) PHP/5.4.16 mod_wsgi/3.4 Python/2.7.5 configured -- resuming normal operations
[Wed Aug 31 19:22:28.303816 2016] [core:notice] [pid 17956] AH00094: Command line: '/usr/sbin/httpd -D FOREGROUND'
[Thu Sep 01 09:35:49.397054 2016] [core:notice] [pid 20080] SELinux policy enabled; httpd running as context system_u:system_r:httpd_t:s0
[Thu Sep 01 09:35:49.399094 2016] [suexec:notice] [pid 20080] AH01232: suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
[Thu Sep 01 09:35:49.415550 2016] [so:warn] [pid 20080] AH01574: module php5_module is already loaded, skipping
[Thu Sep 01 09:35:49.415588 2016] [so:warn] [pid 20080] AH01574: module wsgi_module is already loaded, skipping
[Thu Sep 01 09:35:49.418833 2016] [auth_digest:notice] [pid 20080] AH01757: generating secret for digest authentication ...
[Thu Sep 01 09:35:49.712957 2016] [mpm_prefork:notice] [pid 20080] AH00163: Apache/2.4.6 (CentOS) PHP/5.4.16 mod_wsgi/3.4 Python/2.7.5 configured -- resuming normal operations
[Thu Sep 01 09:35:49.713022 2016] [core:notice] [pid 20080] AH00094: Command line: '/usr/sbin/httpd -D FOREGROUND'
[Thu Sep 01 10:19:18.114919 2016] [mpm_prefork:notice] [pid 20080] AH00170: caught SIGWINCH, shutting down gracefully
[Thu Sep 01 10:22:37.210697 2016] [core:notice] [pid 5401] SELinux policy enabled; httpd running as context system_u:system_r:httpd_t:s0
[Thu Sep 01 10:22:37.212740 2016] [suexec:notice] [pid 5401] AH01232: suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
[Thu Sep 01 10:22:37.228616 2016] [so:warn] [pid 5401] AH01574: module php5_module is already loaded, skipping
[Thu Sep 01 10:22:37.228654 2016] [so:warn] [pid 5401] AH01574: module wsgi_module is already loaded, skipping
[Thu Sep 01 10:22:37.231944 2016] [auth_digest:notice] [pid 5401] AH01757: generating secret for digest authentication ...
[Thu Sep 01 10:22:37.522692 2016] [mpm_prefork:notice] [pid 5401] AH00163: Apache/2.4.6 (CentOS) PHP/5.4.16 mod_wsgi/3.4 Python/2.7.5 configured -- resuming normal operations
[Thu Sep 01 10:22:37.522741 2016] [core:notice] [pid 5401] AH00094: Command line: '/usr/sbin/httpd -D FOREGROUND'
[Thu Sep 01 13:20:14.419086 2016] [mpm_prefork:notice] [pid 5401] AH00170: caught SIGWINCH, shutting down gracefully
[Thu Sep 01 13:20:48.116596 2016] [core:notice] [pid 41924] SELinux policy enabled; httpd running as context system_u:system_r:httpd_t:s0
[Thu Sep 01 13:20:48.118260 2016] [suexec:notice] [pid 41924] AH01232: suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
[Thu Sep 01 13:20:48.133601 2016] [so:warn] [pid 41924] AH01574: module php5_module is already loaded, skipping
[Thu Sep 01 13:20:48.133632 2016] [so:warn] [pid 41924] AH01574: module wsgi_module is already loaded, skipping
[Thu Sep 01 13:20:48.136768 2016] [auth_digest:notice] [pid 41924] AH01757: generating secret for digest authentication ...
[Thu Sep 01 13:20:48.396768 2016] [mpm_prefork:notice] [pid 41924] AH00163: Apache/2.4.6 (CentOS) PHP/5.4.16 mod_wsgi/3.4 Python/2.7.5 configured -- resuming normal operations
[Thu Sep 01 13:20:48.396822 2016] [core:notice] [pid 41924] AH00094: Command line: '/usr/sbin/httpd -D FOREGROUND'
[Thu Sep 01 13:21:00.502249 2016] [mpm_prefork:notice] [pid 41924] AH00170: caught SIGWINCH, shutting down gracefully
[Thu Sep 01 13:21:25.497407 2016] [core:notice] [pid 44854] SELinux policy enabled; httpd running as context system_u:system_r:httpd_t:s0
[Thu Sep 01 13:21:25.498739 2016] [suexec:notice] [pid 44854] AH01232: suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
[Thu Sep 01 13:21:25.514803 2016] [so:warn] [pid 44854] AH01574: module php5_module is already loaded, skipping
[Thu Sep 01 13:21:25.514842 2016] [so:warn] [pid 44854] AH01574: module wsgi_module is already loaded, skipping
[Thu Sep 01 13:21:25.518264 2016] [auth_digest:notice] [pid 44854] AH01757: generating secret for digest authentication ...
[Thu Sep 01 13:21:25.709404 2016] [mpm_prefork:notice] [pid 44854] AH00163: Apache/2.4.6 (CentOS) PHP/5.4.16 mod_wsgi/3.4 Python/2.7.5 configured -- resuming normal operations
[Thu Sep 01 13:21:25.709456 2016] [core:notice] [pid 44854] AH00094: Command line: '/usr/sbin/httpd -D FOREGROUND'
[Thu Sep 01 13:27:32.427493 2016] [mpm_prefork:notice] [pid 44854] AH00170: caught SIGWINCH, shutting down gracefully
[Thu Sep 01 13:30:35.056150 2016] [core:notice] [pid 5096] SELinux policy enabled; httpd running as context system_u:system_r:httpd_t:s0
[Thu Sep 01 13:30:35.058238 2016] [suexec:notice] [pid 5096] AH01232: suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
[Thu Sep 01 13:30:35.075005 2016] [so:warn] [pid 5096] AH01574: module php5_module is already loaded, skipping
[Thu Sep 01 13:30:35.075040 2016] [so:warn] [pid 5096] AH01574: module wsgi_module is already loaded, skipping
[Thu Sep 01 13:30:35.078421 2016] [auth_digest:notice] [pid 5096] AH01757: generating secret for digest authentication ...
[Thu Sep 01 13:30:35.374300 2016] [mpm_prefork:notice] [pid 5096] AH00163: Apache/2.4.6 (CentOS) PHP/5.4.16 mod_wsgi/3.4 Python/2.7.5 configured -- resuming normal operations
[Thu Sep 01 13:30:35.374357 2016] [core:notice] [pid 5096] AH00094: Command line: '/usr/sbin/httpd -D FOREGROUND'
[Thu Sep 01 13:37:17.885730 2016] [mpm_prefork:notice] [pid 5096] AH00170: caught SIGWINCH, shutting down gracefully
Have you made any configuration changes? Does just rebooting the system is causing the issue? The error log does not showing any error.Can you enable the 'debug' level logging and try to restart your httpd service? and share the logs.
From the logs it seems you apache was started but immediately after few seconds it's shutdown.So,something is causing this shutdown.Have you configured any cron job for such service?
Thu Sep 01 13:20:48.396768 2016] [mpm_prefork:notice] [pid 41924] AH00163: Apache/2.4.6 (CentOS) PHP/5.4.16 mod_wsgi/3.4 Python/2.7.5 configured -- resuming normal operations
...
[Thu Sep 01 13:21:00.502249 2016] [mpm_prefork:notice] [pid 41924] AH00170: caught SIGWINCH, shutting down gracefully
Turns out SSLSessionCache was causing the issue
I had to go into /etc/httpd/conf.d ssl.conf
and comment out
#SSLSessionCache shmcb:/run/httpd/sslcache(512000)
I've ran into a problem using mod_proxy/mod_ssl. The Apache HTTP server on SLES 11 SP3 64 bit, OpenSSL 1.0.1.f acts as SSL proxy to the Weblogic 10.3 running on Redhat. The mod_ssl is configured correctly - it works when proxying to to non-ssl serves. Also, the certificate on the proxy was issued with extensions allowing it to be used as both SSL client and server.
Due the regulations servers in this organisation are not allowed insecure communication, so the proxy must use SSL communicating to the application serves.
The problem occurs with SSL handshake between Apache and Weblogic. Perhaps they can't agree on ciphers? What do those 7 bytes received indicate?
[Thu Sep 18 09:32:14 2014] [debug] mod_proxy.c(1036): Running scheme https handler (attempt 0)
[Thu Sep 18 09:32:14 2014] [debug] mod_proxy_http.c(1995): proxy: HTTP: serving URL https://appdev2.example.com:8102/auth/logon.jsp?aa_param=user
[Thu Sep 18 09:32:14 2014] [debug] proxy_util.c(2022): proxy: HTTPS: has acquired connection for (appdev2.example.com)
[Thu Sep 18 09:32:14 2014] [debug] proxy_util.c(2078): proxy: connecting https://appdev2.example.com:8102/auth/logon.jsp?aa_param=user to appdev2.example.com:8102
[Thu Sep 18 09:32:14 2014] [debug] proxy_util.c(2236): proxy: connected /auth/logon.jsp?aa_param=user to appdev2.example.com:8102
[Thu Sep 18 09:32:14 2014] [debug] proxy_util.c(2487): proxy: HTTPS: fam 2 socket created to connect to appdev2.example.com
[Thu Sep 18 09:32:14 2014] [debug] proxy_util.c(2619): proxy: HTTPS: connection complete to 10.40.0.224:8102 (appdev2.example.com)
[Thu Sep 18 09:32:14 2014] [info] [client 10.40.0.224] Connection to child 0 established (server aaproxiedel1:443)
[Thu Sep 18 09:32:14 2014] [info] Seeding PRNG with 144 bytes of entropy
[Thu Sep 18 09:32:14 2014] [debug] ssl_engine_io.c(1090): [client 10.40.0.224] SNI extension for SSL Proxy request set to 'appdev2.example.com'
[Thu Sep 18 09:32:14 2014] [debug] ssl_engine_kernel.c(1903): OpenSSL: Handshake: start
[Thu Sep 18 09:32:14 2014] [debug] ssl_engine_kernel.c(1911): OpenSSL: Loop: before/connect initialization
[Thu Sep 18 09:32:14 2014] [debug] ssl_engine_kernel.c(1911): OpenSSL: Loop: SSLv2/v3 write client hello A
[Thu Sep 18 09:32:14 2014] [debug] ssl_engine_io.c(1939): OpenSSL: read 7/7 bytes from BIO#994fe0 [mem: 9ea880] (BIO dump follows)
[Thu Sep 18 09:32:14 2014] [debug] ssl_engine_io.c(1872): +-------------------------------------------------------------------------+
[Thu Sep 18 09:32:14 2014] [debug] ssl_engine_io.c(1911): | 0000: 15 03 00 00 02 02 28 ......( |
[Thu Sep 18 09:32:14 2014] [debug] ssl_engine_io.c(1917): +-------------------------------------------------------------------------+
[Thu Sep 18 09:32:14 2014] [debug] ssl_engine_kernel.c(1916): OpenSSL: Read: SSLv2/v3 read server hello A
[Thu Sep 18 09:32:14 2014] [debug] ssl_engine_kernel.c(1940): OpenSSL: Exit: error in SSLv2/v3 read server hello A
[Thu Sep 18 09:32:14 2014] [info] [client 10.40.0.224] SSL Proxy connect failed
[Thu Sep 18 09:32:14 2014] [info] SSL Library Error: 336032784 error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure
[Thu Sep 18 09:32:14 2014] [info] [client 10.40.0.224] Connection closed to child 0 with abortive shutdown (server aaproxiedel1:443)
[Thu Sep 18 09:32:14 2014] [error] (502)Unknown error 502: proxy: pass request body failed to 10.40.0.224:8102 (appdev2.example.com)
[Thu Sep 18 09:32:14 2014] [error] [client 141.1.3.134] proxy: Error during SSL Handshake with remote server returned by /auth/logon.jsp
[Thu Sep 18 09:32:14 2014] [error] proxy: pass request body failed to 10.40.0.224:8102 (appdev2.example.com) from 141.1.3.134 ()
[Thu Sep 18 09:32:14 2014] [debug] proxy_util.c(2040): proxy: HTTPS: has released connection for (appdev2.example.com)
[Thu Sep 18 09:32:14 2014] [debug] ssl_engine_kernel.c(1921): OpenSSL: Write: SSL negotiation finished successfully
[Thu Sep 18 09:32:14 2014] [info] [client 141.1.3.134] Connection closed to child 2 with standard shutdown (server aaproxiedel1:443)
Some of the things you can try is enabling "the WebLogic Plugin". This is in the Domain -> Configuration -> Web Applications and server -> General -> Advanced.. This enables all weblogic related plugins to work.
If this doesn't fix it, try to enable tunneling in protocols.
What do you see on the Weblogic logs? Both Access and the server log file?
I am trying to get a Tomcat application front-ended by Apache integrate with Pingfederate. Its agent based integration and I have used Apache Integration Kit 3.0. I am bale to get the agent work in the end I am getting this error:
[Tue Aug 05 03:01:59 2014] [info] Entering the Headers Fixup handler
[Tue Aug 05 03:01:59 2014] [info] Client's host is not whitelisted - Agent is enabled
[Tue Aug 05 03:01:59 2014] [info] AuthType is "PFApacheAgent" - Agent is enabled
[Tue Aug 05 03:01:59 2014] [info] Cleaning up headers with prefix "HPPF_AUTH_"...
[Tue Aug 05 03:01:59 2014] [info] Entering the Content handler
[Tue Aug 05 03:01:59 2014] [info] Client's host is not whitelisted - Agent is enabled
[Tue Aug 05 03:01:59 2014] [info] AuthType is "PFApacheAgent" - Agent is enabled
[Tue Aug 05 03:01:59 2014] [info] Checking whether the request implies to fill out and return the start page...
[Tue Aug 05 03:01:59 2014] [info] The request URL does not match the configured start page filter
[Tue Aug 05 03:01:59 2014] [info] The request does not imply to fill out and return the start page
[Tue Aug 05 03:01:59 2014] [info] Filtering by URI is disabled - anonymous filters are not configured
[Tue Aug 05 03:01:59 2014] [info] The URI of GET request does not match the filter
[Tue Aug 05 03:01:59 2014] [info] The requested resource is not protected - no need to validate session
[Tue Aug 05 03:01:59 2014] [info] Granting access to the requested resource
[Tue Aug 05 03:01:59 2014] [info] Returning DECLINED to let Apache take its default actions for the modified request
[Tue Aug 05 03:01:59 2014] [info] Exiting the Content handler
[Tue Aug 05 03:01:59 2014] [info] Returning HTTP code -1 (DECLINED)
Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.
This question does not appear to be about a specific programming problem, a software algorithm, or software tools primarily used by programmers. If you believe the question would be on-topic on another Stack Exchange site, you can leave a comment to explain where the question may be able to be answered.
Closed 10 months ago.
Improve this question
I'm restarting my apache server by this command "service httpd restart" and getting the following message:
Stopping httpd: [FAILED]
Starting httpd: [ OK ]
Before the problem happened, what I've done is simply to replace an old database file with new one. This database file will be used by another php file. When I did the replacement, I didn't stop httpd.
After failing to restart apache server, I surfed the web to find solution and tried the following methods.
1) Try this "netstat -lnp | grep httpd" and "lsof -i:80" to find if there's any process binding port 80. The result is none process.
2) Remove locked subsys by this "rm -f /var/lock/subsys/httpd" and restart httpd again, but the result is the same as the above message:
Stopping httpd: [FAILED]
Starting httpd: [ OK ]
3) It didn't seem to work even if I reboot the server
How to tackle this problem?
The error_log shows the following message:
[Thu Aug 09 15:10:34 2012] [notice] suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
[Thu Aug 09 15:10:34 2012] [info] Init: Seeding PRNG with 256 bytes of entropy
[Thu Aug 09 15:10:34 2012] [info] Init: Generating temporary RSA private keys (512/1024 bits)
[Thu Aug 09 15:10:34 2012] [info] Init: Generating temporary DH parameters (512/1024 bits)
[Thu Aug 09 15:10:34 2012] [info] Init: Initializing (virtual) servers for SSL
[Thu Aug 09 15:10:34 2012] [info] Server: Apache/2.2.3, Interface: mod_ssl/2.2.3, Library: OpenSSL/0.9.8e-fips-rhel5
[Thu Aug 09 15:10:34 2012] [notice] Digest: generating secret for digest authentication ...
[Thu Aug 09 15:10:34 2012] [notice] Digest: done
[Thu Aug 09 15:10:34 2012] [debug] util_ldap.c(2052): LDAP merging Shared Cache conf: shm=0x8541df0 rmm=0x8541e20 for VHOST: localhost.localdomain
[Thu Aug 09 15:10:34 2012] [info] APR LDAP: Built with OpenLDAP LDAP SDK
[Thu Aug 09 15:10:34 2012] [info] LDAP: SSL support available
[Thu Aug 09 15:27:26 2012] [notice] suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
[Thu Aug 09 15:27:26 2012] [info] Init: Seeding PRNG with 256 bytes of entropy
[Thu Aug 09 15:27:26 2012] [info] Init: Generating temporary RSA private keys (512/1024 bits)
[Thu Aug 09 15:27:26 2012] [info] Init: Generating temporary DH parameters (512/1024 bits)
[Thu Aug 09 15:27:26 2012] [info] Init: Initializing (virtual) servers for SSL
[Thu Aug 09 15:27:26 2012] [info] Server: Apache/2.2.3, Interface: mod_ssl/2.2.3, Library: OpenSSL/0.9.8e-fips-rhel5
[Thu Aug 09 15:27:26 2012] [notice] Digest: generating secret for digest authentication ...
[Thu Aug 09 15:27:26 2012] [notice] Digest: done
[Thu Aug 09 15:27:26 2012] [debug] util_ldap.c(2052): LDAP merging Shared Cache conf: shm=0x97f4df0 rmm=0x97f4e20 for VHOST: localhost.localdomain
[Thu Aug 09 15:27:26 2012] [info] APR LDAP: Built with OpenLDAP LDAP SDK
[Thu Aug 09 15:27:26 2012] [info] LDAP: SSL support available ssl_error_log:
[Thu Aug 09 15:10:34 2012] [notice] suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
[Thu Aug 09 15:10:34 2012] [info] Init: Seeding PRNG with 256 bytes of entropy
[Thu Aug 09 15:10:34 2012] [info] Init: Generating temporary RSA private keys (512/1024 bits)
[Thu Aug 09 15:10:34 2012] [info] Init: Generating temporary DH parameters (512/1024 bits)
[Thu Aug 09 15:10:34 2012] [info] Init: Initializing (virtual) servers for SSL
[Thu Aug 09 15:10:34 2012] [info] Server: Apache/2.2.3, Interface: mod_ssl/2.2.3, Library: OpenSSL/0.9.8e-fips-rhel5
[Thu Aug 09 15:10:34 2012] [notice] Digest: generating secret for digest authentication ...
[Thu Aug 09 15:10:34 2012] [notice] Digest: done
[Thu Aug 09 15:10:34 2012] [debug] util_ldap.c(2052): LDAP merging Shared Cache conf: shm=0x8541df0 rmm=0x8541e20 for VHOST: localhost.localdomain
[Thu Aug 09 15:10:34 2012] [info] APR LDAP: Built with OpenLDAP LDAP SDK
[Thu Aug 09 15:10:34 2012] [info] LDAP: SSL support available
[Thu Aug 09 15:27:26 2012] [notice] suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
[Thu Aug 09 15:27:26 2012] [info] Init: Seeding PRNG with 256 bytes of entropy
[Thu Aug 09 15:27:26 2012] [info] Init: Generating temporary RSA private keys (512/1024 bits)
[Thu Aug 09 15:27:26 2012] [info] Init: Generating temporary DH parameters (512/1024 bits)
[Thu Aug 09 15:27:26 2012] [info] Init: Initializing (virtual) servers for SSL
[Thu Aug 09 15:27:26 2012] [info] Server: Apache/2.2.3, Interface: mod_ssl/2.2.3, Library: OpenSSL/0.9.8e-fips-rhel5
[Thu Aug 09 15:27:26 2012] [notice] Digest: generating secret for digest authentication ...
[Thu Aug 09 15:27:26 2012] [notice] Digest: done
[Thu Aug 09 15:27:26 2012] [debug] util_ldap.c(2052): LDAP merging Shared Cache conf: shm=0x97f4df0 rmm=0x97f4e20 for VHOST: localhost.localdomain
[Thu Aug 09 15:27:26 2012] [info] APR LDAP: Built with OpenLDAP LDAP SDK
[Thu Aug 09 15:27:26 2012] [info] LDAP: SSL support available
Thanks for any help!
Can you enable LogLevel Debug in httpd.conf file and try starting the service. You should then be able to get more details in the error logs. By the way you seem to have SSL enabled so most probably it wouldn't be 80 but port 443. If it is an issue with SSL .. you can probably disable SSL and just enable http and check of apache starts.
Also is you apache configured to talk to any LDAP server for authentication.
Was facing the same problem but
sudo /etc/init.d/apache2 reload
works just fine for me
For me, this worked on RH Linux:
First enable Super User mode:
sudo su -
Now go to Apache (httpd) location in terminal: cd /usr/sbin
To start Apache server: httpd -k start
To stop Apache server: httpd -k stop
Check if httpd service is running: pgrep httpd
Hope it helps someone.
Can you help me
to understand the origin of this error .... 11 bytes expected !?!
tnx
ag
[Fri Dec 23 10:37:39 2011] [debug] ssl_engine_kernel.c(1769): OpenSSL: Handshake: start
[Fri Dec 23 10:37:39 2011] [debug] ssl_engine_kernel.c(1777): OpenSSL: Loop: before/accept initialization
[Fri Dec 23 10:37:39 2011] [debug] ssl_engine_io.c(1523): OpenSSL: I/O error, 11 bytes expected to read on BIO#19ed40 [mem: 1bf268]
[Fri Dec 23 10:37:39 2011] [debug] ssl_engine_kernel.c(1806): OpenSSL: Exit: error in SSLv2/v3 read client hello A