it seems localized to firefox 3. and that line usually fixes it. i've
regenerated the cert from scratch. i don't know what else to do.

2009/03/26 01:37:20 [info] 12640#0: *64 SSL_do_handshake() failed
(SSL: error:140943FC:SSL routines:SSL3_READ_BYTES:sslv3 alert bad
record mac) while SSL handshaking, client: 1.2.1.71, server:
bugzilla.foo.org
2009/03/26 01:37:20 [debug] 12640#0: *62 SSL handshake handler: 0
2009/03/26 01:37:20 [debug] 12640#0: *62 SSL_do_handshake: -1
2009/03/26 01:37:20 [info] 12640#0: *62 peer closed connection in SSL
handshake (104: Connection reset by peer) while SSL handshaking,
client: 1.2.1.71, server: bugzilla.foo.org

firefox 3.0.7 on windows
nginx 0.7.44



On Wed, Mar 25, 2009 at 11:28 PM, Michael Shadle <mike503@gmail.com> wrote:
> 2009/03/26 01:25:05 [info] 7282#0: *189 SSL_do_handshake() failed
> (SSL: error:140943FC:SSL routines:SSL3_READ_BYTES:sslv3 alert bad
> record mac) while SSL handshaking, client: 1.2.3.4, server:
> bugzilla.foo.org
>
> I just got it re-keyed and freshly redone. No browsers seem to
> complain so far, but I keep seeing this.
>
> I've tried with this "ssl_protocols SSLv3 TLSv1;" and without it.
>
> Are there more protocols I should be trying here?
>