Hi folks,

I'm fairly new to Open SSL... I'm  load balancing 2 Apache web servers,
both HTTP and HTTPS traffic. .  The load balancer is performing
persistance based on the SSL session id.  When I take one of the servers
out for  maintanence via the load balancer and the  SSL session id
expires, I  get load balanced to the next available server(which is
expected behavior). At this point the available server sends TCP Resets
and I get the following error messages on the available server:

SSL-ERROR_LOG


[Mon Feb 11 15:33:03 2002] [error] mod_ssl: SSL handshake failed (server
172.16.183.99:443, client 171.69.86.77) (OpenSSL library error follows)
[Mon Feb 11 15:33:03 2002] [error] OpenSSL: error:0407106B:rsa
routines:RSA_padding_check_PKCS1_type_2:block type is not 02
[Mon Feb 11 15:33:03 2002] [error] OpenSSL: error:04065072:rsa
routines:RSA_EAY_PRIVATE_DECRYPT:padding check failed
[Mon Feb 11 15:33:03 2002] [error] OpenSSL: error:1408B076:SSL
routines:SSL3_GET_CLIENT_KEY_EXCHANGE:bad rsa decrypt


SSL_ENGINE_LOG

[11/Feb/2002 15:33:03 21940] [info]  Connection to child 7 established
(server 172.16.183.99:443, client 171.69.86.77)
[11/Feb/2002 15:33:03 21940] [info]  Seeding PRNG with 1160 bytes of
entropy
[11/Feb/2002 15:33:03 21940] [error] SSL handshake failed (server
172.16.183.99:443, client 171.69.86.77) (OpenSSL library error follows)
[11/Feb/2002 15:33:03 21940] [error] OpenSSL: error:0407106B:rsa
routines:RSA_padding_check_PKCS1_type_2:block type is not 02
[11/Feb/2002 15:33:03 21940] [error] OpenSSL: error:04065072:rsa
routines:RSA_EAY_PRIVATE_DECRYPT:padding check failed
[11/Feb/2002 15:33:03 21940] [error] OpenSSL: error:1408B076:SSL
routines:SSL3_GET_CLIENT_KEY_EXCHANGE:bad rsa decrypt


Any help or suggestions is greatly appreciated!

Thanks again,
Gonzalo
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to