This is a discussion on IE SSL problem within the Apache Web Server forums, part of the Web Server and Related Forums category; Dear all. After I changed Apache 1.x + mod_ssl to Apache 2.x (with SSL compiled into) I have serious ...
|
|||||||
| FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
|
|||
|
Dear all.
After I changed Apache 1.x + mod_ssl to Apache 2.x (with SSL compiled into) I have serious problem with conecting to the servis using IE. I use selfsigned certificates version 3. Using other browser (F,N,O) I don't have any problem. Below I place trace by etheral. Maybe someon can halp me hov to fix it (maybe it is well known problem) or direct me to proper place beacuse I can't find a clue. using IE: Capturing on eth0 0.000000 192.168.49.1 -> 192.168.49.2 TCP 1501 > https [SYN] Seq=0 Ack=0 Win=16384 Len=0 MSS=1460 0.003674 192.168.49.2 -> 192.168.49.1 TCP https > 1501 [SYN, ACK] Seq=0 Ack=1 Win=5840 Len=0 MSS=1460 0.000266 192.168.49.1 -> 192.168.49.2 TCP 1501 > https [ACK] Seq=1 Ack=1 Win=17520 Len=0 0.001830 192.168.49.1 -> 192.168.49.2 SSLv2 Client Hello 0.001924 192.168.49.2 -> 192.168.49.1 TCP https > 1501 [ACK] Seq=1 Ack=79 Win=5840 Len=0 0.005655 192.168.49.2 -> 192.168.49.1 TLS Alert (Level: Fatal, Description: Handshake Failure) 0.005932 192.168.49.2 -> 192.168.49.1 TCP https > 1501 [FIN, ACK] Seq=8 Ack=79 Win=5840 Len=0 0.006195 192.168.49.1 -> 192.168.49.2 TCP 1501 > https [ACK] Seq=79 Ack=9 Win=17513 Len=0 0.008521 192.168.49.1 -> 192.168.49.2 TCP 1501 > https [FIN, ACK] Seq=79 Ack=9 Win=17513 Len=0 0.008550 192.168.49.2 -> 192.168.49.1 TCP https > 1501 [ACK] Seq=9 Ack=80 Win=5840 Len=0 0.008960 192.168.49.1 -> 192.168.49.2 TCP 1503 > https [SYN] Seq=0 Ack=0 Win=16384 Len=0 MSS=1460 0.009007 192.168.49.2 -> 192.168.49.1 TCP https > 1503 [SYN, ACK] Seq=0 Ack=1 Win=5840 Len=0 MSS=1460 0.009274 192.168.49.1 -> 192.168.49.2 TCP 1503 > https [ACK] Seq=1 Ack=1 Win=17520 Len=0 0.010468 192.168.49.1 -> 192.168.49.2 SSLv2 Client Hello 0.010551 192.168.49.2 -> 192.168.49.1 TCP https > 1503 [ACK] Seq=1 Ack=46 Win=5840 Len=0 0.012826 192.168.49.2 -> 192.168.49.1 SSLv2 Server Hello 0.014907 192.168.49.1 -> 192.168.49.2 TCP 1503 > https [FIN, ACK] Seq=46 Ack=1058 Win=16463 Len=0 0.015549 192.168.49.2 -> 192.168.49.1 TCP https > 1503 [FIN, ACK] Seq=1058 Ack=47 Win=5840 Len=0 0.015837 192.168.49.1 -> 192.168.49.2 TCP 1503 > https [ACK] Seq=47 Ack=1059 Win=16463 Len=0 and using ex. F: Capturing on eth0 0.000000 192.168.49.1 -> 192.168.49.2 TCP 1505 > https [SYN] Seq=0 Ack=0 Win=16384 Len=0 MSS=1460 0.003627 192.168.49.2 -> 192.168.49.1 TCP https > 1505 [SYN, ACK] Seq=0 Ack=1 Win=5840 Len=0 MSS=1460 0.000261 192.168.49.1 -> 192.168.49.2 TCP 1505 > https [ACK] Seq=1 Ack=1 Win=17520 Len=0 0.001599 192.168.49.1 -> 192.168.49.2 TLS Client Hello 0.001693 192.168.49.2 -> 192.168.49.1 TCP https > 1505 [ACK] Seq=1 Ack=121 Win=5840 Len=0 0.039412 192.168.49.2 -> 192.168.49.1 TLS Server Hello, Certificate, [Unreassembled Packet (incorrect TCP checksum)] 0.039457 192.168.49.2 -> 192.168.49.1 TLS Continuation Data, [Unreassembled Packet (incorrect TCP checksum)] 0.040487 192.168.49.1 -> 192.168.49.2 TCP 1505 > https [ACK] Seq=121 Ack=2533 Win=17520 Len=0 0.048653 192.168.49.1 -> 192.168.49.2 TLS Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message 0.072605 192.168.49.2 -> 192.168.49.1 TLS Change Cipher Spec, Encrypted Handshake Message 0.074543 192.168.49.1 -> 192.168.49.2 TLS Application Data 0.113949 192.168.49.2 -> 192.168.49.1 TCP https > 1505 [ACK] Seq=2592 Ack=868 Win=7686 Len=0 0.145056 192.168.49.2 -> 192.168.49.1 TLS Application Data, Application Data, [Unreassembled Packet (incorrect TCP checksum)] 0.145082 192.168.49.2 -> 192.168.49.1 TLS Continuation Data, [Unreassembled Packet (incorrect TCP checksum)] 0.147090 192.168.49.1 -> 192.168.49.2 TCP 1505 > https [ACK] Seq=868 Ack=5354 Win=17520 Len=0 0.170143 192.168.49.1 -> 192.168.49.2 TLS Application Data 0.170174 192.168.49.2 -> 192.168.49.1 TCP https > 1505 [ACK] Seq=5354 Ack=1417 Win=8784 Len=0 0.172095 192.168.49.2 -> 192.168.49.1 TLS Application Data 0.310049 192.168.49.1 -> 192.168.49.2 TCP 1505 > https [ACK] Seq=1417 Ack=5615 Win=17259 Len=0 I also can't find reason of "incorrect TCP checksum" but it worry me less ..... or should more ? Best regards Marek. |