i am working to make letsencrypt .pem files work on my F34 workstation. so far, i try firefox browser, and, ...
ssl:info] [pid 16630:tid 16630] AH01914: Configuring server www.linuxlighthouse.com:443 for SSL protocol [ssl:trace3] [pid 16630:tid 16630] ssl_engine_init.c(649): Using OpenSSL/system default SSL/TLS protocols [ssl:trace3] [pid 16630:tid 16630] ssl_engine_init.c(670): Creating new SSL context (protocols: default) [ssl:trace1] [pid 16630:tid 16630] ssl_engine_init.c(1036): Configuring permitted SSL ciphers [PROFILE=SYSTEM] [ssl:debug] [pid 16630:tid 16630] ssl_engine_init.c(1248): AH01904: Configuring server certificate chain (2 CA certificates) [ssl:debug] [pid 16630:tid 16630] ssl_engine_init.c(528): AH01893: Configuring TLS extension handling [ssl:trace3] [pid 16630:tid 16630] ssl_util_ssl.c(436): [ www.linuxlighthouse.com:443] modssl_X509_match_name: expecting name ' www.linuxlighthouse.com', NOT matched by ID 'linuxlighthouse.com' [ssl:trace3] [pid 16630:tid 16630] ssl_util_ssl.c(436): [ www.linuxlighthouse.com:443] modssl_X509_match_name: expecting name ' www.linuxlighthouse.com', NOT matched by ID 'ws.linuxlighthouse.com' [ssl:trace3] [pid 16630:tid 16630] ssl_util_ssl.c(436): [ www.linuxlighthouse.com:443] modssl_X509_match_name: expecting name ' www.linuxlighthouse.com', matched by ID 'www.linuxlighthouse.com' [ssl:debug] [pid 16630:tid 16630] ssl_util_ssl.c(451): AH02412: [ www.linuxlighthouse.com:443] Cert matches for name 'www.linuxlighthouse.com' [subject: CN=linuxlighthouse.com / issuer: CN=R3,O=Let's Encrypt,C=US / serial: 03DBD10F4587D6C0A8DF92A4AFAB30608EFF / notbefore: Oct 22 21:12:41 2021 GMT / notafter: Jan 20 21:12:40 2022 GMT] [ssl:info] [pid 16630:tid 16630] AH02568: Certificate and private key www.linuxlighthouse.com:443:0 configured from /etc/letsencrypt/live/ linuxlighthouse.com/fullchain.pem and /etc/letsencrypt/live/ linuxlighthouse.com/privkey.pem [ssl:info] [pid 16630:tid 16630] AH01914: Configuring server www.linuxlighthouse.com:443 for SSL protocol [ssl:trace3] [pid 16630:tid 16630] ssl_engine_init.c(649): Using OpenSSL/system default SSL/TLS protocols [ssl:trace3] [pid 16630:tid 16630] ssl_engine_init.c(670): Creating new SSL context (protocols: default) [ssl:trace1] [pid 16630:tid 16630] ssl_engine_init.c(1036): Configuring permitted SSL ciphers [PROFILE=SYSTEM] [ssl:debug] [pid 16630:tid 16630] ssl_engine_init.c(1248): AH01904: Configuring server certificate chain (2 CA certificates) [ssl:debug] [pid 16630:tid 16630] ssl_engine_init.c(528): AH01893: Configuring TLS extension handling [ssl:trace3] [pid 16630:tid 16630] ssl_util_ssl.c(436): [ www.linuxlighthouse.com:443] modssl_X509_match_name: expecting name ' www.linuxlighthouse.com', NOT matched by ID 'linuxlighthouse.com' [ssl:trace3] [pid 16630:tid 16630] ssl_util_ssl.c(436): [ www.linuxlighthouse.com:443] modssl_X509_match_name: expecting name ' www.linuxlighthouse.com', NOT matched by ID 'ws.linuxlighthouse.com' [ssl:trace3] [pid 16630:tid 16630] ssl_util_ssl.c(436): [ www.linuxlighthouse.com:443] modssl_X509_match_name: expecting name ' www.linuxlighthouse.com', matched by ID 'www.linuxlighthouse.com' [ssl:debug] [pid 16630:tid 16630] ssl_util_ssl.c(451): AH02412: [ www.linuxlighthouse.com:443] Cert matches for name 'www.linuxlighthouse.com' [subject: CN=linuxlighthouse.com / issuer: CN=R3,O=Let's Encrypt,C=US / serial: 03DBD10F4587D6C0A8DF92A4AFAB30608EFF / notbefore: Oct 22 21:12:41 2021 GMT / notafter: Jan 20 21:12:40 2022 GMT] [ssl:info] [pid 16630:tid 16630] AH02568: Certificate and private key www.linuxlighthouse.com:443:0 configured from /etc/letsencrypt/live/ linuxlighthouse.com/fullchain.pem and /etc/letsencrypt/live/ linuxlighthouse.com/privkey.pem ssl:info] [pid 16630:tid 16630] AH01914: Configuring server www.linuxlighthouse.com:443 for SSL protocol [ssl:trace3] [pid 16630:tid 16630] ssl_engine_init.c(649): Using OpenSSL/system default SSL/TLS protocols [ssl:trace3] [pid 16630:tid 16630] ssl_engine_init.c(670): Creating new SSL context (protocols: default) [ssl:trace1] [pid 16630:tid 16630] ssl_engine_init.c(1036): Configuring permitted SSL ciphers [PROFILE=SYSTEM] [ssl:debug] [pid 16630:tid 16630] ssl_engine_init.c(1248): AH01904: Configuring server certificate chain (2 CA certificates) [ssl:debug] [pid 16630:tid 16630] ssl_engine_init.c(528): AH01893: Configuring TLS extension handling [ssl:trace3] [pid 16630:tid 16630] ssl_util_ssl.c(436): [ www.linuxlighthouse.com:443] modssl_X509_match_name: expecting name ' www.linuxlighthouse.com', NOT matched by ID 'linuxlighthouse.com' [ssl:trace3] [pid 16630:tid 16630] ssl_util_ssl.c(436): [ www.linuxlighthouse.com:443] modssl_X509_match_name: expecting name ' www.linuxlighthouse.com', NOT matched by ID 'ws.linuxlighthouse.com' [ssl:trace3] [pid 16630:tid 16630] ssl_util_ssl.c(436): [ www.linuxlighthouse.com:443] modssl_X509_match_name: expecting name ' www.linuxlighthouse.com', matched by ID 'www.linuxlighthouse.com' [ssl:debug] [pid 16630:tid 16630] ssl_util_ssl.c(451): AH02412: [ www.linuxlighthouse.com:443] Cert matches for name 'www.linuxlighthouse.com' [subject: CN=linuxlighthouse.com / issuer: CN=R3,O=Let's Encrypt,C=US / serial: 03DBD10F4587D6C0A8DF92A4AFAB30608EFF / notbefore: Oct 22 21:12:41 2021 GMT / notafter: Jan 20 21:12:40 2022 GMT] [ssl:info] [pid 16630:tid 16630] AH02568: Certificate and private key www.linuxlighthouse.com:443:0 configured from /etc/letsencrypt/live/ linuxlighthouse.com/fullchain.pem and /etc/letsencrypt/live/ linuxlighthouse.com/privkey.pem [ssl:info] [pid 16630:tid 16630] AH01914: Configuring server www.linuxlighthouse.com:443 for SSL protocol [ssl:trace3] [pid 16630:tid 16630] ssl_engine_init.c(649): Using OpenSSL/system default SSL/TLS protocols [ssl:trace3] [pid 16630:tid 16630] ssl_engine_init.c(670): Creating new SSL context (protocols: default) [ssl:trace1] [pid 16630:tid 16630] ssl_engine_init.c(1036): Configuring permitted SSL ciphers [PROFILE=SYSTEM] [ssl:debug] [pid 16630:tid 16630] ssl_engine_init.c(1248): AH01904: Configuring server certificate chain (2 CA certificates) [ssl:debug] [pid 16630:tid 16630] ssl_engine_init.c(528): AH01893: Configuring TLS extension handling [ssl:trace3] [pid 16630:tid 16630] ssl_util_ssl.c(436): [ www.linuxlighthouse.com:443] modssl_X509_match_name: expecting name ' www.linuxlighthouse.com', NOT matched by ID 'linuxlighthouse.com' [ssl:trace3] [pid 16630:tid 16630] ssl_util_ssl.c(436): [ www.linuxlighthouse.com:443] modssl_X509_match_name: expecting name ' www.linuxlighthouse.com', NOT matched by ID 'ws.linuxlighthouse.com' [ssl:trace3] [pid 16630:tid 16630] ssl_util_ssl.c(436): [ www.linuxlighthouse.com:443] modssl_X509_match_name: expecting name ' www.linuxlighthouse.com', matched by ID 'www.linuxlighthouse.com' [ssl:debug] [pid 16630:tid 16630] ssl_util_ssl.c(451): AH02412: [ www.linuxlighthouse.com:443] Cert matches for name 'www.linuxlighthouse.com' [subject: CN=linuxlighthouse.com / issuer: CN=R3,O=Let's Encrypt,C=US / serial: 03DBD10F4587D6C0A8DF92A4AFAB30608EFF / notbefore: Oct 22 21:12:41 2021 GMT / notafter: Jan 20 21:12:40 2022 GMT] [ssl:info] [pid 16630:tid 16630] AH02568: Certificate and private key www.linuxlighthouse.com:443:0 configured from /etc/letsencrypt/live/ linuxlighthouse.com/fullchain.pem and /etc/letsencrypt/live/ linuxlighthouse.com/privkey.pem
F34 install, add letsencrypt , and i am https ready.
problem, i am not getting text secure link and not seeing a lot of options>
rather than screw it up by guessing, i need to learn a bit about SSL Engine.
suggestions? tia, ..
On 10/29/21 13:30, Jack Craig wrote:
i am working to make letsencrypt .pem files work on my F34 workstation. so far, i try firefox browser, and, ...
[snip ssl logging]
F34 install, add letsencrypt , and i am https ready.
problem, i am not getting text secure link and not seeing a lot of options>
Can you provide more information about what you think isn't working? I checked your site and there are no ssl errors. Firefox says it's secure for all 3 domains. The letsencrypt certificate is valid.
1) i cant get the secure icon on the address bar.
2) log stuff like, ..
Fri Oct 29 22:08:41.035843 2021] [ssl:trace3] [pid 15784:tid 15900] ssl_engine_kernel.c(2242): [client 64.41.200.111:40862] OpenSSL: Exit: error in error
*ssl_error_log:[Fri Oct 29 22:08:41.035862 2021] [ssl:info] [pid 15784:tid 15900] [client 64.41.200.111:40862 http://64.41.200.111:40862] AH02008: SSL library error 1 in handshake (server www.linuxlighthouse.com:443 http://www.linuxlighthouse.com:443)ssl_error_log:[Fri Oct 29 22:08:41.035903 2021] [ssl:info] [pid 15784:tid 15900] SSL Library Error: error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocolssl_error_log:[Fri Oct 29 22:08:41.153272 2021] [ssl:trace3] [pid 16246:tid 16283] ssl_engine_kernel.c(2223): [client 64.41.200.111:40896 http://64.41.200.111:40896] OpenSSL: Write: errorssl_error_log:[Fri Oct 29 22:08:41.153288 2021] [ssl:trace3] [pid 16246:tid 16283] ssl_engine_kernel.c(2242): [client 64.41.200.111:40896 http://64.41.200.111:40896] OpenSSL: Exit: error in errorssl_error_log:[Fri Oct 29 22:08:41.153306 2021] [ssl:info] [pid 16246:tid 16283] [client 64.41.200.111:40896 http://64.41.200.111:40896] AH02008: SSL library error 1 in handshake (server www.linuxlighthouse.com:443 http://www.linuxlighthouse.com:443)* ssl_error_log:[Fri Oct 29 22:08:41.153347 2021] [ssl:info] [pid 16246:tid 16283] SSL Library Error: error:1408F119:SSL routines:ssl3_get_record:decryption failed or bad record mac ssl_error_log:[Fri Oct 29 22:08:41.384214 2021] [ssl:trace3] [pid 15784:tid 15903] ssl_engine_kernel.c(2223): [client 64.41.200.111:41040] OpenSSL: Write: error ssl_error_log:[Fri Oct 29 22:08:41.384223 2021] [ssl:trace3] [pid 15784:tid 15903] ssl_engine_kernel.c(2242): [client 64.41.200.111:41040] OpenSSL: Exit: error in error
thx...
On Fri, Oct 29, 2021 at 9:32 PM Samuel Sieb samuel@sieb.net wrote:
On 10/29/21 13:30, Jack Craig wrote:
i am working to make letsencrypt .pem files work on my F34 workstation. so far, i try firefox browser, and, ...
[snip ssl logging]
F34 install, add letsencrypt , and i am https ready.
problem, i am not getting text secure link and not seeing a lot of
options>
Can you provide more information about what you think isn't working? I checked your site and there are no ssl errors. Firefox says it's secure for all 3 domains. The letsencrypt certificate is valid. _______________________________________________ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-leave@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
weird, i've been busy all day, but it is working now!! ??
On Fri, Oct 29, 2021 at 9:32 PM Samuel Sieb samuel@sieb.net wrote:
On 10/29/21 13:30, Jack Craig wrote:
i am working to make letsencrypt .pem files work on my F34 workstation. so far, i try firefox browser, and, ...
[snip ssl logging]
F34 install, add letsencrypt , and i am https ready.
problem, i am not getting text secure link and not seeing a lot of
options>
Can you provide more information about what you think isn't working? I checked your site and there are no ssl errors. Firefox says it's secure for all 3 domains. The letsencrypt certificate is valid. _______________________________________________ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-leave@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
in addition, ...
ssl_error_log:[Fri Oct 29 22:30:01.821030 2021] [ssl:info] [pid 15783:tid 15859] [client 209.141.62.185:49422] AH01996: SSL handshake failed: HTTP spoken on HTTPS port; trying to send HTML error page ssl_error_log:[Fri Oct 29 22:30:01.821070 2021] [ssl:info] [pid 15783:tid 15859] SSL Library Error: error:1408F09C:SSL routines:ssl3_get_record:http request
also, ...
Oct 29 12:48:16 ws.linuxlighthouse.com systemd[1]: Starting The Apache HTTP Server... Oct 29 12:48:16 ws.linuxlighthouse.com httpd[15779]: [Fri Oct 29 12:48:16.987469 2021] [core:trace3] [pid 15779:tid 15779] core.c(3496): Setting LogLevel for all modules to trace6 Oct 29 12:48:17 ws.linuxlighthouse.com httpd[15779]: *Server configured, listening on: port 443, port 80* Oct 29 12:48:17 ws.linuxlighthouse.com systemd[1]: Started The Apache HTTP Server. [root@ws httpd]$
[root@ws httpd]$ netstat -tunlp | grep http
*tcp6 0 0 :::80 :::* LISTEN 15779/httpd tcp6 0 0 :::443 :::* LISTEN 15779/httpd *
*i see ipv6 listening on 443, but not ipv4 80, ??*
*isnt that wrong too??*
*tia,...*
On Fri, Oct 29, 2021 at 11:15 PM Jack Craig jack.craig.aptos@gmail.com wrote:
weird, i've been busy all day, but it is working now!! ??
On Fri, Oct 29, 2021 at 9:32 PM Samuel Sieb samuel@sieb.net wrote:
On 10/29/21 13:30, Jack Craig wrote:
i am working to make letsencrypt .pem files work on my F34 workstation. so far, i try firefox browser, and, ...
[snip ssl logging]
F34 install, add letsencrypt , and i am https ready.
problem, i am not getting text secure link and not seeing a lot of
options>
Can you provide more information about what you think isn't working? I checked your site and there are no ssl errors. Firefox says it's secure for all 3 domains. The letsencrypt certificate is valid. _______________________________________________ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-leave@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
-
Jack Craig -
Samuel Sieb