2014-11-21 111 views
0

每当请求到达Apache服务器时,它都无法完成它。我得到在试图建立连接到服务器Apache的错误日志Apache到weblogic ssl连接失败

[Fri Nov 21 18:02:02 2014] [info] [client 10.246.86.135] Connection to child 75 established (server myserver.com:443) 
[Fri Nov 21 18:02:02 2014] [info] Seeding PRNG with 1024 bytes of entropy 
[Fri Nov 21 18:02:02 2014] [debug] ssl_engine_kernel.c(1871): OpenSSL: Handshake: start 
[Fri Nov 21 18:02:02 2014] [debug] ssl_engine_kernel.c(1879): OpenSSL: Loop: before/accept initialization 
[Fri Nov 21 18:02:02 2014] [debug] ssl_engine_io.c(1947): OpenSSL: I/O error, 11 bytes expected to read on BIO#7f94c4001360 [mem: 7f950c024bd0] 
[Fri Nov 21 18:02:02 2014] [debug] ssl_engine_kernel.c(1908): OpenSSL: Exit: error in SSLv2/v3 read client hello A 
[Fri Nov 21 18:02:02 2014] [info] [client 10.246.86.135] (70014)End of file found: SSL handshake interrupted by system [Hint: Stop button pressed in browser?!] 
[Fri Nov 21 18:02:02 2014] [info] [client 10.246.86.135] Connection closed to child 75 with abortive shutdown (server myserver.com:443) 

以下错误,得到了以下输出

[email protected]: openssl s_client -connect 10.246.86.142:8444 -state -nbio 
CONNECTED(00000003) 
turning on non blocking io 
SSL_connect:before/connect initialization 
SSL_connect:SSLv2/v3 write client hello A 
SSL_connect:error in SSLv2/v3 read server hello A 
write R BLOCK 
SSL3 alert read:fatal:handshake failure 
SSL_connect:error in SSLv2/v3 read server hello A 
140342456735560:error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure:s23_clnt.c:741: 
--- 
no peer certificate available 
--- 
No client certificate CA names sent 
--- 
SSL handshake has read 7 bytes and written 263 bytes 
--- 
New, (NONE), Cipher is (NONE) 
Secure Renegotiation IS NOT supported 
Compression: NONE 
Expansion: NONE 
--- 

而且

[email protected]: wget https://10.246.86.142:8444 --debug 
DEBUG output created by Wget 1.12 on linux-gnu. 

--2014-11-21 17:57:39-- https://10.246.86.142:8444/ 
Connecting to 10.246.86.142:8444... connected. 
Created socket 3. 
Releasing 0x0000000001b6a2a0 (new refcount 0). 
Deleting unused 0x0000000001b6a2a0. 
Initiating SSL handshake. 
SSL handshake failed. 
OpenSSL: error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure 
Closed fd 3 
Unable to establish SSL connection. 

任何想法,可能什么错?所有证书都有效并且有效

+0

当你运行openssl时,你用'CAFile'还是'CAPath'试过了? http://stackoverflow.com/questions/22304564/cant-verify-ca-certificate-unless-capath-or-cafile-used – 2014-11-22 16:06:14

+0

你是否启用了apache和weblogic的插件?另外我相信你可能需要一个CA签名证书。您需要更改设置才能使用自签名证书。 – 2014-11-22 21:25:11

+0

@name我试着用CAfile和CApath,仍然是同样的问题。 – 2014-11-24 09:32:55

回答

0

这是weblogic结束时证书的问题。证书丢失密钥使用'密钥加密'

当在密钥加密使用证书导入到weblogic结束时,连接成功。