Re: sslv3 alert handshake failure :-(

[Jörg Horchler]

Hi again,

I recompiled openssl, mod_ssl and my Apache again. This time I used 
'shared' as flag for OpenSSL 'config'. This was necessary to compile 
shared libraries (dylib on Mac OS X).

I tried to access my server again using SSL. The result is the same. 
Here is whar ssldump writes:

using openssl s_client:

New TCP connection #1: localhost(49510) <-> localhost(443)
1 1  0.0255 (0.0255)  C>S  Handshake
      ClientHello
        Version 3.0
        cipher suites
        Unknown value 0x39
        Unknown value 0x38
        Unknown value 0x35
        SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA
        SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA
        SSL_RSA_WITH_3DES_EDE_CBC_SHA
        Unknown value 0x33
        Unknown value 0x32
        Unknown value 0x2f
        SSL_RSA_WITH_IDEA_CBC_SHA
        SSL_DHE_DSS_WITH_RC4_128_SHA
        SSL_RSA_WITH_RC4_128_SHA
        SSL_RSA_WITH_RC4_128_MD5
        SSL_DHE_DSS_EXPORT1024_WITH_DES_CBC_SHA
        SSL_RSA_EXPORT1024_WITH_DES_CBC_SHA
        SSL_RSA_EXPORT1024_WITH_RC2_CBC_56_MD5
        SSL_DHE_RSA_WITH_DES_CBC_SHA
        SSL_DHE_DSS_WITH_DES_CBC_SHA
        SSL_RSA_WITH_DES_CBC_SHA
        SSL_DHE_DSS_WITH_RC2_56_CBC_SHA
        SSL_RSA_EXPORT1024_WITH_RC4_56_SHA
        SSL_RSA_EXPORT1024_WITH_RC4_56_MD5
        SSL_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA
        SSL_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA
        SSL_RSA_EXPORT_WITH_DES40_CBC_SHA
        SSL_RSA_EXPORT_WITH_RC2_CBC_40_MD5
        SSL_RSA_EXPORT_WITH_RC4_40_MD5
        compression methods
                  NULL
1 2  0.0276 (0.0020)  S>C  Alert
    level           fatal
    value           handshake_failure
1    0.0434 (0.0158)  S>C  TCP FIN
1    0.0514 (0.0080)  C>S  TCP FIN
and using my browser:

New TCP connection #1: localhost(49512) <-> localhost(443)
1 1  0.0013 (0.0013)  C>S SSLv2 compatible client hello
  Version 3.1
  cipher suites
  TLS_RSA_WITH_3DES_EDE_CBC_SHA
  Unknown value 0xff83
  TLS_RSA_WITH_RC4_128_SHA
  TLS_RSA_WITH_RC4_128_MD5
  TLS_RSA_WITH_DES_CBC_SHA
  Unknown value 0xff82
  TLS_RSA_EXPORT_WITH_RC4_40_MD5
  TLS_RSA_EXPORT_WITH_DES40_CBC_SHA
  TLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5
  SSL_RSA_WITH_RC2_CBC_MD5
  TLS_RSA_WITH_NULL_MD5
  SSL2_CK_RC4
  SSL2_CK_RC4_EXPORT40
  SSL2_CK_RC2
  SSL2_CK_RC2_EXPORT40
  SSL2_CK_DES
  SSL2_CK_3DES
1 2  0.1334 (0.1321)  S>C  Alert
    level           fatal
    value           handshake_failure
1    0.1371 (0.0037)  S>C  TCP FIN
1    0.1379 (0.0008)  C>S  TCP FIN


I hope this helps to analyze my problem.

Best Regars
Jörg
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]