Can't connect to ssl!

[janton]

Hello All,

After a good night in the pub a woke up in my old dade's house and started up my old laptop. I went to my company website to check some support questions etc.

I WAS CHOCKED because i got a warning that my SSL certificate was incorrect what the ...... i thought? This is NO good especially my webshop works with this in the checkout. So i checked my dade machine but here the certificate worked correct. And also it worked correct in IE on my old machine. So this doesn't happen always, somehow it happends. SO i check my directadmin error log.. Yep there it was:

012:02:19-11:12:46: Can't connect to ssl!
2012:02:19-11:12:46: -> A failure in the SSL library occurred, usually a protocol error.
2012:02:19-11:12:46: -> error:00000001:lib(0):func(0):reason(1)

Still in firefox the certificate isn't working, but i guess this happends because the certificate is cached somehow. On the other machine it works perfect in Firefox so it doesn't have to do anything with that.

I will start researching on the internet, but i did not find anything related directadmin and this error with google. That is why i start the thread here.

 

[janton]

Or is this a directadmin problem because it shows the error in the directadmin log and not the apache log ?

 

[zEitEr]

You should check Apache log, but not directadmin in order to get details about your e-shop's SSL.

If your SSL cert works in some browsers and doesn't in other, then you should consult with your SSL company from which you bought the cert. As you might need to add the intermediate CA certificate to your installation.

 

[janton]

You should check Apache log, but not directadmin in order to get details about your e-shop's SSL.

If your SSL cert works in some browsers and doesn't in other, then you should consult with your SSL company from which you bought the cert. As you might need to add the intermediate CA certificate to your installation.

No Sorry you understood me wrong, the certificate works in all browsers (PositiveSSL)
But apparently sometimes there is a error on the server, as i shown you above, that causes the SSL to go wrong. I checked Apache log and not seen anything strainge around that time. But i will check older logs because i have seen the "error:00000001:lib(0):func(0):reason(1)" happen more often in directadmin logs.
I have found a thread: http://www.directadmin.com/forum/showthread.php?t=36875&page=1
But it seems unsolved..

 

[zEitEr]

Do you have directadmin running with SSL enabled? I guess it happens when somebody tries to connect it on http:// (tcp://) with browser, or locally, and for any reason can not follow redirect (if force hostname is used) to https:// (ssl://).

 

[janton]

Do you have directadmin running with SSL enabled? I guess it happens when somebody tries to connect it on http:// (tcp://) with browser, or locally, and for any reason can not follow redirect (if force hostname is used) to https:// (ssl://).

Ok thx, or it;s a issue with PositiveSSL and Firefox... i just found this thread:
http://jimmyzimmerman.com/blog/2011/03/positivessl-untrusted-connection-in-firefox.html

I never had problems in my firefox but i used different Vmware builds and all have the same issue with firefox!! How come .. aRGggg i did never notice this before.. how many costumers i may have lost with this!?

 

[janton]

I fixed it for me it was... tada... i did not include the CA: Step 4: Install the CA Root Certificate > http://www.site-helper.com/ssl.html
I don't know if i will still have those error:00000001:lib(0):func(0):reason(1) i will check during the week(s)

 

[zEitEr]

I never had problems in my firefox but i used different Vmware builds and all have the same issue with firefox!! How come .. aRGggg i did never notice this before.. how many costumers i may have lost with this!?

OK, why do you think that the error affects browsing or connecting to Directadmin? We've got a server for our own needs, none customer would ever login into its Directadmin. And from time to time I see the error in logs, despite the fact, I've never been rejected or disconnected from a session with Directadmin (on SSL), and I use Opera for Windows.

And since the error just appears in logs doesn't trouble anybody, I've never gone into details in order to learn the reasons. Let me know if you think the other way.