Welcome! Log In Create A New Profile

Advanced

Re: Intermittent SSL Handshake Errors

B.R.
July 12, 2015 01:40PM
Out of thin air, I suspect it is a certificate problem.
You seem to have configured *the same* certificate (and private key) for
those 2 domains. Since certificates are generally tied to a single domain,
that could explain errors.

Another idea: have you checked nginx has been built with SNI support and
you client also supports it? Problems with SNI would mean the default
server certificate (since you did not define a default server for your IP
address/port pair, nginx would pick up the first block containing a
'listen' directive configured for it) would be presented whatever domain
you are trying to access, ending up with certificate/domain mismatch.
See http://nginx.org/en/docs/http/configuring_https_servers.html.
---
*B. R.*

On Sun, Jul 12, 2015 at 6:33 PM, flechamobile <nginx-forum@nginx.us> wrote:

> I found myself with the same problem and found the cause (and obvious
> solution).
>
> On my nginx server I run various website and they all have their own server
> {} config block in separate files under 'sites-available' folder.
> Some sites are on different IP's and some are on the same IP.
>
> Now the cause of the problem was because I'd had set 2 server blocks
> listening on the same IP on SSL for different server_names like so:
>
> server {
> listen 37.230.101.215:443 ssl spdy;
> server_name www.domain1.com *.domain1.com;
>
> ssl on;
> ssl_certificate /etc/ssl/cert.crt;
> ssl_certificate_key /etc/ssl/key.key;
> ssl_session_cache shared:SSL:10m;
> ssl_session_timeout 10m;
>
> ..etc
> }
>
> and for another site the same:
>
> server {
> listen 37.230.101.215:443 ssl spdy;
> server_name www.domain2.com *.domain2.com;
>
> ssl on;
> ssl_certificate /etc/ssl/cert.crt;
> ssl_certificate_key /etc/ssl/key.key;
> ssl_session_cache shared:SSL:10m;
> ssl_session_timeout 10m;
>
> ..etc
> }
>
> When you do this it gives the exact same error as this thread is about..
> might be something to check.
>
> Posted at Nginx Forum:
> http://forum.nginx.org/read.php?2,256373,260227#msg-260227
>
> _______________________________________________
> nginx mailing list
> nginx@nginx.org
> http://mailman.nginx.org/mailman/listinfo/nginx
>
_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx
Subject Author Posted

Intermittent SSL Handshake Errors

Eric R. January 31, 2015 01:06PM

Re: Intermittent SSL Handshake Errors

Richard Stanway January 31, 2015 02:04PM

Re: Intermittent SSL Handshake Errors

Etienne Champetier January 31, 2015 03:26PM

Re: Intermittent SSL Handshake Errors

ericr February 02, 2015 02:56PM

Re: Intermittent SSL Handshake Errors

tempspace February 02, 2015 03:26PM

Re: Intermittent SSL Handshake Errors

ericr February 03, 2015 01:18PM

Re: Intermittent SSL Handshake Errors

tempspace February 03, 2015 02:04PM

Re: Intermittent SSL Handshake Errors

ericr February 03, 2015 09:42PM

Re: Intermittent SSL Handshake Errors

tempspace February 03, 2015 09:48PM

RE: Intermittent SSL Handshake Errors

Lukas Tribus February 03, 2015 03:42PM

Re: RE: Intermittent SSL Handshake Errors

ericr February 06, 2015 01:49PM

RE: Intermittent SSL Handshake Errors

Lukas Tribus February 06, 2015 06:32PM

Re: Intermittent SSL Handshake Errors

ankneo March 20, 2015 01:57PM

Re: Intermittent SSL Handshake Errors

tempspace March 20, 2015 02:15PM

Re: Intermittent SSL Handshake Errors

ankneo March 26, 2015 02:41PM

Re: Intermittent SSL Handshake Errors

ywarnier April 18, 2015 05:31PM

Re: Intermittent SSL Handshake Errors

DrMickeyLauer May 08, 2015 10:49AM

Re: Intermittent SSL Handshake Errors

Maxim Dounin March 21, 2015 10:54AM

Re: Intermittent SSL Handshake Errors

tempspace March 21, 2015 11:50AM

Re: Intermittent SSL Handshake Errors

tempspace March 21, 2015 11:59AM

Re: Intermittent SSL Handshake Errors

Maxim Dounin March 21, 2015 09:14PM

Re: Intermittent SSL Handshake Errors

flechamobile July 12, 2015 12:33PM

Re: Intermittent SSL Handshake Errors

B.R. July 12, 2015 01:40PM

Re: Intermittent SSL Handshake Errors

flechamobile January 15, 2016 06:36PM

Re: Intermittent SSL Handshake Errors

flechamobile January 15, 2016 06:41PM

Re: Intermittent SSL Handshake Errors

piyushmalhotra February 11, 2016 01:26PM

Re: Intermittent SSL Handshake Errors

tempspace July 14, 2015 09:58PM

Re: Intermittent SSL Handshake Errors

Maxim Dounin July 15, 2015 12:10PM

Re: Intermittent SSL Handshake Errors

piyushmalhotra January 11, 2016 02:13PM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 177
Record Number of Users: 8 on April 13, 2023
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready