You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@httpd.apache.org by PGNet Dev <pg...@gmail.com> on 2009/07/06 18:10:04 UTC

fatal, browser-specific "ssl_error_handshake_unexpected_alert" error. a mod_ssl bug?

hi,

i've installed

	apache2-2.2.11-10.1
	apache2-worker-2.2.11-10.1

from openSUSE 11.1 repos,

	http://download.opensuse.org/repositories/Apache/openSUSE_11.1

i've installed Drupal 6.13 in a subdir, running under Apache w/mod_ssl, i.e. @

	https://www.mydomain.net/main/

just about everything works fine / as expected, except ...

when attempting to make changes to a sinlge/specific Drupal theme
(fwiw, "Acquia Marina), i'm getting fatal errors:

	Secure Connection Failed
	An error occurred during a connection to www.mydomain.net.
	SSL peer was not expecting a handshake message it received.
	(Error code: ssl_error_handshake_unexpected_alert)

the problem occurs, fatally, only in Firefox/OSX, _not_ in Safari/OSX.
 it's 100% reproducible on similarly configured servers, with fresh
installs of Apache & Drupal 6.13.

i've posted debug-level apache logs for the cases of:

	(A) Firefox -> http://pastebin.com/f472b380c
	(B) Safari  -> http://pastebin.com/f19c4c1e7

possibly (?) relevant are:

  my original notice:
	"changes to acquia_marina theme config fail when site runs under SSL."
	 http://drupal.org/node/510970

  a Suhosin dependence?:
	"Can't change theme configuration with some modules enabled"
	 http://drupal.org/node/324085

  an apache bug that shares 'SSL renegotiation' and Firefox dependence:
	"ssl renegotiation hangs with long ca list"
	 https://issues.apache.org/bugzilla/show_bug.cgi?id=46952

  with a purported, mod_ssl-only "fix", committed in apache /trunk,
	http://svn.apache.org/viewvc?view=rev&revision=788715

 and,
    http://svn.apache.org/viewvc?view=rev&revision=726109

the problem sure _seems_ SSL-related, but as to the root cause, and
any possible fix ... ?  a bug in mod_ssl?  my SSL config? other?

happy to provide add'l info, once clear what's helpful.  any
insights/suggestions are appreciated.

thanks!