SSL site fails to load

Discussion in 'Installation/Configuration' started by crypted, Mar 8, 2009.

  1. crypted

    crypted Member

    The website https://melaniejessseminars.com/ has SSL enabled and an SSL key installed. However, Firefox and I.E. cannot load the SSL side of the website. SSL is enabled for the website.

    Code:
    Failed to Connect
    
    Firefox can't establish a connection to the server at melaniejessseminars.com.
    
    Though the site seems valid, the browser was unable to establish a connection.
    
        * Could the site be temporarily unavailable? Try again later.
        * Are you unable to browse other sites?  Check the computer's network connection.
        * Is your computer or network protected by a firewall or proxy? Incorrect settings can interfere with Web browsing.

    The key seems to be installed correctly, the SSL directory of WEB50 has the following:
    Code:
    [dingle@its ssl]# ls -lah
    total 24K
    drwxr-xr-x 2 web50_melftp web50 4.0K Mar  7 17:13 .
    drwxr-xr-x 8 web50_melftp web50 4.0K Mar  7 18:54 ..
    -r-------- 1 root         root     0 Apr 23  2007 .no_delete
    -rw-r--r-- 1 root         root  1002 Mar  7 18:54 www.melaniejessseminars.com.crt
    -rw-r--r-- 1 root         root   769 Mar  7 17:13 www.melaniejessseminars.com.csr
    -r-------- 1 root         root   887 Mar  7 17:13 www.melaniejessseminars.com.key
    -rw-r--r-- 1 root         root   951 Mar  7 17:13 www.melaniejessseminars.com.key.org
    NETSTAT output is as follows:
    Code:
    Active Internet connections (servers and established)
    Proto Recv-Q Send-Q Local Address               Foreign Address             State       PID/Program name            
    tcp        0      0 *:mysql                     *:*                         LISTEN      17833/mysqld        
    tcp        0      0 *:netbios-ssn               *:*                         LISTEN      31554/smbd                    
    tcp        0      0 *:ndmp                      *:*                         LISTEN      27298/perl            
    tcp        0      0 *:hosts2-ns                 *:*                         LISTEN      18009/ispconfig_htt 
    tcp        0      0 *:ftp                       *:*                         LISTEN      18174/proftpd: (acc 
    tcp        0      0 mail.intrac.net:domain      *:*                         LISTEN      18152/named         
    tcp        0      0 mail.derekgordon.com:domain *:*                         LISTEN      18152/named         
    tcp        0      0 its7.derekgordon.com:domain *:*                         LISTEN      18152/named         
    tcp        0      0 its6.derekgordon.com:domain *:*                         LISTEN      18152/named         
    tcp        0      0 its5.derekgordon.com:domain *:*                         LISTEN      18152/named         
    tcp        0      0 its4.derekgordon.com:domain *:*                         LISTEN      18152/named         
    tcp        0      0 its3.derekgordon.com:domain *:*                         LISTEN      18152/named         
    tcp        0      0 its2.derekgordon.com:domain *:*                         LISTEN      18152/named         
    tcp        0      0 its1.derekgordon.com:domain *:*                         LISTEN      18152/named         
    tcp        0      0 its.derekgordon.com:domain  *:*                         LISTEN      18152/named         
    tcp        0      0 localhost.localdomai:domain *:*                         LISTEN      18152/named         
    tcp        0      0 its4.derekgordon.com:ica    *:*                         LISTEN      7039/(squid)        
    tcp        0      0 mail.derekg:afs3-fileserver *:*                         LISTEN      3001/ircd           
    tcp        0      0 localhost.localdomain:rndc  *:*                         LISTEN      18152/named         
    tcp        0      0 *:smtp                      *:*                         LISTEN      18106/master                         
    tcp        0      1 its4.derekgordon.com:smtp   c-68-42-34-94.hsd1.nm.:2372 FIN_WAIT1   -                         
    tcp        0      0 mail.derekgordon.com:46472  mail.derekgordon.com:irdmi  ESTABLISHED 21391/perl          
    tcp        0      0 *:imaps                     *:*                         LISTEN      16738/dovecot       
    tcp        0      0 *:pop3s                     *:*                         LISTEN      16738/dovecot       
    tcp        0      0 *:pop3                      *:*                         LISTEN      16738/dovecot       
    tcp        0      0 *:imap                      *:*                         LISTEN      16738/dovecot       
    tcp        0      0 *:http                      *:*                         LISTEN      18032/httpd         
    tcp        0      0 *:ssh                       *:*                         LISTEN      2074/sshd           
    tcp        0      0 localhost6.localdomain:rndc *:*                         LISTEN      18152/named         
    
    Any help would be appreciated. I did follow the step-by-step manual and went through a couple of forum posts to see if it could be solved, no luck..

    Thanks!
     
  2. crypted

    crypted Member

    UPDATE: I added Listen 443 to APACHE's httpd.conf and now I get a new error.

    Code:
    Secure Connection Failed
    An error occurred during a connection to melaniejessseminars.com.
    
    SSL received a record that exceeded the maximum permissible length.
    
    (Error code: ssl_error_rx_record_too_long)
    The page you are trying to view can not be shown because the authenticity of the received data could not be verified.
    
        * Please contact the web site owners to inform them of this problem.
    Any thoughts?
     
  3. falko

    falko Super Moderator Howtoforge Staff

    Which distribution are you using?

    Please make sure that there's just one SSL vhost per IP address on your server.
     
  4. crypted

    crypted Member

    CentOS 5.2 and this is the only SSL site that I'm aware of.

    I verified that no sites use SSL but this one. Also, after removing the SSL CERT the same error code is presented even without SSL data available.

    SSL received a record that exceeded the maximum permissible length.

    (Error code: ssl_error_rx_record_too_long)

    ---

    After removing and reinstalling SSL on that domain, the VHOSTS file no longer has SSL listed under that domain.
     
    Last edited: Mar 8, 2009
  5. till

    till Super Moderator Staff Member ISPConfig Developer

    The SSL cert is broken. Please recreate the SSL cert in ISPConfig.
     

Share This Page