IE SSL problem

This is a discussion on IE SSL problem within the Apache Web Server forums, part of the Web Server and Related Forums category; Dear all. After I changed Apache 1.x + mod_ssl to Apache 2.x (with SSL compiled into) I have serious ...


Go Back   Usenet Forums > Web Server and Related Forums > Apache Web Server

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 06-30-2006
AltVision Group
 
Posts: n/a
Default IE SSL problem

Dear all.

After I changed Apache 1.x + mod_ssl to Apache 2.x (with SSL compiled into)
I have serious problem with conecting to the servis using IE.

I use selfsigned certificates version 3. Using other browser (F,N,O) I don't
have any problem. Below I place trace by etheral. Maybe someon can halp me
hov to fix it (maybe it is well known problem) or direct me to proper place
beacuse I can't find a clue.

using IE:

Capturing on eth0
0.000000 192.168.49.1 -> 192.168.49.2 TCP 1501 > https [SYN] Seq=0 Ack=0
Win=16384 Len=0 MSS=1460
0.003674 192.168.49.2 -> 192.168.49.1 TCP https > 1501 [SYN, ACK] Seq=0
Ack=1 Win=5840 Len=0 MSS=1460
0.000266 192.168.49.1 -> 192.168.49.2 TCP 1501 > https [ACK] Seq=1 Ack=1
Win=17520 Len=0
0.001830 192.168.49.1 -> 192.168.49.2 SSLv2 Client Hello
0.001924 192.168.49.2 -> 192.168.49.1 TCP https > 1501 [ACK] Seq=1 Ack=79
Win=5840 Len=0
0.005655 192.168.49.2 -> 192.168.49.1 TLS Alert (Level: Fatal,
Description: Handshake Failure)
0.005932 192.168.49.2 -> 192.168.49.1 TCP https > 1501 [FIN, ACK] Seq=8
Ack=79 Win=5840 Len=0
0.006195 192.168.49.1 -> 192.168.49.2 TCP 1501 > https [ACK] Seq=79 Ack=9
Win=17513 Len=0
0.008521 192.168.49.1 -> 192.168.49.2 TCP 1501 > https [FIN, ACK] Seq=79
Ack=9 Win=17513 Len=0
0.008550 192.168.49.2 -> 192.168.49.1 TCP https > 1501 [ACK] Seq=9 Ack=80
Win=5840 Len=0
0.008960 192.168.49.1 -> 192.168.49.2 TCP 1503 > https [SYN] Seq=0 Ack=0
Win=16384 Len=0 MSS=1460
0.009007 192.168.49.2 -> 192.168.49.1 TCP https > 1503 [SYN, ACK] Seq=0
Ack=1 Win=5840 Len=0 MSS=1460
0.009274 192.168.49.1 -> 192.168.49.2 TCP 1503 > https [ACK] Seq=1 Ack=1
Win=17520 Len=0
0.010468 192.168.49.1 -> 192.168.49.2 SSLv2 Client Hello
0.010551 192.168.49.2 -> 192.168.49.1 TCP https > 1503 [ACK] Seq=1 Ack=46
Win=5840 Len=0
0.012826 192.168.49.2 -> 192.168.49.1 SSLv2 Server Hello
0.014907 192.168.49.1 -> 192.168.49.2 TCP 1503 > https [FIN, ACK] Seq=46
Ack=1058 Win=16463 Len=0
0.015549 192.168.49.2 -> 192.168.49.1 TCP https > 1503 [FIN, ACK] Seq=1058
Ack=47 Win=5840 Len=0
0.015837 192.168.49.1 -> 192.168.49.2 TCP 1503 > https [ACK] Seq=47
Ack=1059 Win=16463 Len=0

and using ex. F:

Capturing on eth0
0.000000 192.168.49.1 -> 192.168.49.2 TCP 1505 > https [SYN] Seq=0 Ack=0
Win=16384 Len=0 MSS=1460
0.003627 192.168.49.2 -> 192.168.49.1 TCP https > 1505 [SYN, ACK] Seq=0
Ack=1 Win=5840 Len=0 MSS=1460
0.000261 192.168.49.1 -> 192.168.49.2 TCP 1505 > https [ACK] Seq=1 Ack=1
Win=17520 Len=0
0.001599 192.168.49.1 -> 192.168.49.2 TLS Client Hello
0.001693 192.168.49.2 -> 192.168.49.1 TCP https > 1505 [ACK] Seq=1 Ack=121
Win=5840 Len=0
0.039412 192.168.49.2 -> 192.168.49.1 TLS Server Hello, Certificate,
[Unreassembled Packet (incorrect TCP checksum)]
0.039457 192.168.49.2 -> 192.168.49.1 TLS Continuation Data,
[Unreassembled Packet (incorrect TCP checksum)]
0.040487 192.168.49.1 -> 192.168.49.2 TCP 1505 > https [ACK] Seq=121
Ack=2533 Win=17520 Len=0
0.048653 192.168.49.1 -> 192.168.49.2 TLS Client Key Exchange, Change
Cipher Spec, Encrypted Handshake Message
0.072605 192.168.49.2 -> 192.168.49.1 TLS Change Cipher Spec, Encrypted
Handshake Message
0.074543 192.168.49.1 -> 192.168.49.2 TLS Application Data
0.113949 192.168.49.2 -> 192.168.49.1 TCP https > 1505 [ACK] Seq=2592
Ack=868 Win=7686 Len=0
0.145056 192.168.49.2 -> 192.168.49.1 TLS Application Data, Application
Data, [Unreassembled Packet (incorrect TCP checksum)]
0.145082 192.168.49.2 -> 192.168.49.1 TLS Continuation Data,
[Unreassembled Packet (incorrect TCP checksum)]
0.147090 192.168.49.1 -> 192.168.49.2 TCP 1505 > https [ACK] Seq=868
Ack=5354 Win=17520 Len=0
0.170143 192.168.49.1 -> 192.168.49.2 TLS Application Data
0.170174 192.168.49.2 -> 192.168.49.1 TCP https > 1505 [ACK] Seq=5354
Ack=1417 Win=8784 Len=0
0.172095 192.168.49.2 -> 192.168.49.1 TLS Application Data
0.310049 192.168.49.1 -> 192.168.49.2 TCP 1505 > https [ACK] Seq=1417
Ack=5615 Win=17259 Len=0


I also can't find reason of "incorrect TCP checksum" but it worry me less
..... or should more ?


Best regards

Marek.




 
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT +1. The time now is 11:55 PM.


Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0