Welcome to OStack Knowledge Sharing Community for programmer and developer-Open, Learning and Share
Welcome To Ask or Share your Answers For Others

Categories

0 votes
341 views
in Technique[技术] by (71.8m points)

apache - ssl_error_rx_record_too_long和Apache SSL [关闭](ssl_error_rx_record_too_long and Apache SSL [closed])

I've got a customer trying to access one of my sites, and they keep getting this error > ssl_error_rx_record_too_long

(我有一个客户试图访问我的某个网站,他们不断收到此错误> ssl_error_rx_record_too_long)

They're getting this error on all browsers, all platforms.

(他们在所有浏览器,所有平台上都出现此错误。)

I can't reproduce the problem at all.

(我根本无法重现这个问题。)

My server and myself are located in the USA, the customer is located in India.

(我的服务器和我自己位于美国,客户位于印度。)

I googled on the problem, and the main source seems to be that the SSL port is speaking in HTTP.

(我搜索了问题,主要来源似乎是SSL端口在HTTP中发言。)

I checked my server, and this is not happening.

(我检查了我的服务器,但这没有发生。)

I tried the solution mentioned here , but the customer has stated it did not fix the issue.

(我尝试了这里提到的解决方案 ,但客户已声明它没有解决问题。)

Can anyone tell me how I can fix this, or how I can reproduce this???

(任何人都可以告诉我如何解决这个问题,或者我如何重现这个???)

THE SOLUTION

(解决方案)

Turns out the customer had a misconfigured local proxy!

(原来客户有一个配置错误的本地代理!)

Hope that helps anyone finding this question trying to debug it in the future.

(希望有助于任何人发现这个问题,试图在将来调试它。)

  ask by Subimage translate from so

与恶龙缠斗过久,自身亦成为恶龙;凝视深渊过久,深渊将回以凝视…
Welcome To Ask or Share your Answers For Others

1 Answer

0 votes
by (71.8m points)

The link mentioned by Subimage was right on the money for me.

(Subimage提到链接对我来说是正确的。)

It suggested changing the virtual host tag, ie, from <VirtualHost myserver.example.com:443> to <VirtualHost _default_:443>

(它建议更改虚拟主机标记,即从<VirtualHost myserver.example.com:443>更改为<VirtualHost _default_:443>)

Error code: ssl_error_rx_record_too_long

(错误代码: ssl_error_rx_record_too_long)

This usually means the implementation of SSL on your server is not correct.

(这通常意味着服务器上的SSL实现不正确。)

The error is usually caused by a server side problem which the server administrator will need to investigate.

(该错误通常是由服务器管理员需要调查的服务器端问题引起的。)

Below are some things we recommend trying.

(以下是我们建议尝试的一些事项。)

  • Ensure that port 443 is open and enabled on your server.

    (确保服务器上的端口443已打开并已启用。)

    This is the standard port for https communications.

    (这是https通信的标准端口。)

  • If SSL is using a non-standard port then FireFox 3 can sometimes give this error.

    (如果SSL使用的是非标准端口,则FireFox 3有时会出现此错误。)

    Ensure SSL is running on port 443.

    (确保SSL在端口443上运行。)

  • If using Apache2 check that you are using port 443 for SSL.

    (如果使用Apache2,请检查您是否使用端口443进行SSL。)

    This can be done by setting the ports.conf file as follows

    (这可以通过设置ports.conf文件来完成,如下所示)

     Listen 80 Listen 443 https 
  • Make sure you do not have more than one SSL certificate sharing the same IP.

    (确保您没有多个共享相同IP的SSL证书。)

    Please ensure that all SSL certificates utilise their own dedicated IP.

    (请确保所有SSL证书都使用自己的专用IP。)

  • If using Apache2 check your vhost config.

    (如果使用Apache2检查您的vhost配置。)

    Some users have reported changing <VirtualHost> to _default_ resolved the error.

    (一些用户报告将<VirtualHost>更改为_default_解决了错误。)

That fixed my problem.

(这解决了我的问题。)

It's rare that I google an error message and get the first hit with the right answer!

(很少有我谷歌一个错误消息,并获得正确答案的第一个!)

:-)

(:-))

In addition to the above , these are some other solutions that other folks have found were causing the issue:

(除了上述内容之外 ,这些是其他人发现导致此问题的其他一些解决方案:)

  • Make sure that your SSL certificate is not expired

    (确保您的SSL证书未过期)

  • Try to specify the Cipher:

    (尝试指定密码:)

    SSLCipherSuite ALL:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM:+SSLv3


与恶龙缠斗过久,自身亦成为恶龙;凝视深渊过久,深渊将回以凝视…
Welcome to OStack Knowledge Sharing Community for programmer and developer-Open, Learning and Share
Click Here to Ask a Question

...