HTTPS Unknown Error

Hi All,

I receive this error "HTTPS Unknown Error" with error code 500 from the =
apache server when i try to make a PUT request through HTTPS. Are their =
any specific reasons of that ? I have a test application which gets 204 =
response from the same server but our live application gets 500 response =
code. This seems confusing - anyone with help will be highly =
appreciated.

Regards,
NK

-----Original Message-----
From: Boyle Owen [mailto:Owen.Boyle@swx.com]
Sent: Thursday, August 21, 2003 7:43 AM
To: modssl-users@modssl.org
Subject: RE:


>-----Original Message-----
>From: Dave Paris [mailto:dparis@w3works.com]
>
> snip... You claim to =20
>have spent two MONTHS trying to find what I found in under 10=20
>SECONDS.

Er... the difference is that you recognised the problem immediately
because you have seen it before. So you knew exactly what to type into
Google.

If you put yourself in Ian's shoes, he was using the NBVH mechanism for
ages and became very familiar with it. He then tried to extend it to
SSL, which is a reasonable thing to do, and then was suprised that it
didn't work. It is not blindingly obvious, a priori, what the problem
is. In that case, it is not so obvious what to type into Google - you
might not necessarily realise that the problem is to do with NBVH,
especially if that is not the only thing you changed.

I am making this comment because I followed a very similar route to Ian
in discovering this SSL limitation. In my case, I was tasked by my boss,
who is a competent programmer, to "set up some NBVHs under SSL". It
never occurred to me that my boss could have handed me an impossible
task and I spent weeks trying to get it to work. In the end, it was this
mailing list which enlightened me.

Since then, I've tried to help out on the list, initially by explaining
this issue whenever it came up but lately (since others also now do this
quite ably), by chipping in whenever some bright spark reckons that he's
found a workaround (it's a bit like debunking perpetual motion machine
designs). Usually, he's forgotten about authentication and is using the
same cert in all VHs...

Anyway, the point I'm making is that the original poster is obviously a
seasoned hacker (he uses openssl from the command line!) and as such
should be welcome on this list and congratulated for using mod_ssl... So
could we be a bit friendlier please?

Rgds,
Owen Boyle
Disclaimer: Any disclaimer attached to this message may be ignored.=20





>That doesn't make me one bit of a better person than you... it just =20
>says that my mind works in a way that is different from yours. I'd =20
>wager there are certain tasks you accomplish quite easily that would =20
>take me some effort. It's the way us humans seem to be designed.
>
>Every once in awhile, it's a good thing to look at who we are=20
>and what =20
>we're good at and then review what we've chosen to do in life.=20
> Doing a =20
>job that meshes well with how you think can be all the difference =20
>between looking forward to an rewarding day at the office and=20
>a bruised =20
>forehead from repeatedly smashing your head against a wall in =20
>self-frustration. [ of course, I'm omitting the forehead bruising =20
>caused by external influences like PHBs ;-) ] As for the=20
>tone of your =20
>note .. life's tough, grab a helmet.
>
>Kind Regards,
>-dsp
>
>On Thursday, Aug 21, 2003, at 00:05 US/Eastern, Ian Newlands wrote:
>
>> If I hadn't already exhausted resources I would not have made this =20
>> post in the first place. I have tried 3 different versions=20
>of apache, =20
>> searched through previous postings, used search engines etc.=20
>bought 2 =20
>> books on apache and have been attempting to get this going=20
>for almost =20
>> 2 months now.
>>
>> I'm glad you're amused by my frustration here.
>>
>> If there is anyone out there that is willing to submit a serious =20
>> response to this I would appreciate it greatly.
>>
>> Regards,
>>
>> Ian Newlands
>>
>>
>> ----- Original Message -----
>> From: "Dave Paris"
>> To:
>> Cc: "Ian Newlands"
>> Sent: Thursday, August 21, 2003 11:58 AM
>> Subject: Re: virtual hosting
>>
>>
>>> geeze. is it that time of the month already for this question? =20
>>> seems like it was just yesterday when it was asked last ..=20
>maybe I'm =20
>>> just thinking of the other 100,000 times it was asked.
>>>
>>> in all seriousness, this dead horse has been beaten so many=20
>times on =20
>>> this list there isn't even a carcass left to hit at this point. =20
>>> please go dig through the mail list archives to see why name-based =20
>>> virtual hosts don't work with SSL.
>>>
>>> yes, that's a flippant answer. no, you're not likely to=20
>get a reply =20
>>> any more serious.
>>>
>>> -dsp
>>>
>>> On Wednesday, Aug 20, 2003, at 22:09 US/Eastern, Ian Newlands wrote:
>>>
>>> > I am currently running about 15 virtual hosts using name=20
>based on =20
>>> port > 80, and 1 virtual host using SSL.
>>> >
>>> > My SSL host is currently working with the following:
>>> >
>>> >
>>> >
>>> > However I want to change this to the IP based hosting for this =20
>>> host, > allowing me to then add more SSL based virtual=20
>hosts on this =20
>>> setup, so > I tried changing this to the following:
>>> >
>>> >
>>> >
>>> > By doing this my SSL virtual host stops working altogether.
>>> >
>>> > I try the following to debug it on a remote machine:
>>> >
>>> > # openssl s_client -connect 203.xxx.xxx.xxx:443
>>> > CONNECTED(00000003)
>>> > 27604:error:140770FC:SSL=20
>routines:SSL23_GET_SERVER_HELLO:unknown =20
>>> > protocol:s23_clnt.c:475:
>>> >
>>> > I do the exact same thing on the local machine and it=20
>responds with =20
>>> a > valid SSL response.
>>> >
>>> > Can anyone suggest might be wrong here?
>>> >
>>> > Regards,
>>> >
>>> > Ian Newlands
>>> >
>>> > ____________________________________________________________ _____
>>> > Hotmail is now available on Australian mobile phones. Go to > =20
>>> http://ninemsn.com.au/mobilecentral/signup.asp
>>> >
>>> > =20
>>>=20
>___________________________________________________________ ___________
>>> > Apache Interface to OpenSSL (mod_ssl) =20
>>> www.modssl.org
>>> > User Support Mailing List =20
>>> modssl-users@modssl.org
>>> > Automated List Manager =20
>>> majordomo@modssl.org
>>> >
>>>
>>>
>>>
>>
>> ____________________________________________________________ _____
>> Hot chart ringtones and polyphonics. Go to =20
>> http://ninemsn.com.au/mobilemania/default.asp
>>
>>
>
>___________________________________________________________ ___________
>Apache Interface to OpenSSL (mod_ssl) www.modssl.org
>User Support Mailing List modssl-users@modssl.org
>Automated List Manager majordomo@modssl.org
>

This message is for the named person's use only. It may contain
confidential, proprietary or legally privileged information. No
confidentiality or privilege is waived or lost by any mistransmission.
If you receive this message in error, please notify the sender urgently
and then immediately delete the message and any copies of it from your
system. Please also immediately destroy any hardcopies of the message.
You must not, directly or indirectly, use, disclose, distribute, print,
or copy any part of this message if you are not the intended recipient.
The sender's company reserves the right to monitor all e-mail
communications through their networks. Any views expressed in this
message are those of the individual sender, except where the message
states otherwise and the sender is authorised to state them to be the
views of the sender's company.=20


____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org
____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org