Welcome to Dream.In.Code
Become an Expert!

Join 137,192 Programmers for FREE! Get instant access to thousands of experts, tutorials, code snippets, and more! There are 2,379 people online right now. Registration is fast and FREE... Join Now!




SSL Configuration

 
Reply to this topicStart new topic

SSL Configuration, Can only access from host computer

ramz
26 May, 2008 - 10:27 AM
Post #1

New D.I.C Head
*

Joined: 8 Jun, 2007
Posts: 10


My Contributions
Hello,

I am trying to set up an encrypted site, mostly as a learning tool at this stage. I have a self-signed certificate, and everything seems to work great when I access the site from a browser on the host computer, i.e. using

https://real.ip.address/

However, if I do the same thing from another computer, I cannot connect from a browser on a different machine. I am not sure what I am doing wrong, so any ideas would be appreciated.

Here is some additional information:

I have found that on the host machine (linux), the following commands work:
openssl s_client -connect real.ip.address:443 -state -debug
openssl s_client -connect localhost:443 -state -debug

[ give "Verify return code: 18 (self signed certificate)" ]

openssl s_client -connect real.ip.address:80 -state -debug
[ gives "Verify return code: 21 (unable to verify the first certificate)"]

openssl s_client -connect localhost:80 -state -debug
[error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol:s23_clnt.c:567:]

On another machine,
openssl s_client -connect real.ip.address:443 -state -debug
[hangs]
openssl s_client -connect real.ip.address:80 -state -debug
[ gives "Verify return code: 21 (unable to verify the first certificate)"]

User is offlineProfile CardPM
+Quote Post

no2pencil
RE: SSL Configuration
26 May, 2008 - 08:28 PM
Post #2

My fridge be runnin OH NOEZ!
Group Icon

Joined: 10 May, 2007
Posts: 6,504



Thanked: 67 times
Dream Kudos: 2425
Expert In: Goofing Off

My Contributions
What is your router doing with the 443 requests? Are they being sent to the correct server?

Can you view a lot of your firewall to verify that it is seeing traffic on port 443?
User is offlineProfile CardPM
+Quote Post

ramz
RE: SSL Configuration
27 May, 2008 - 02:57 AM
Post #3

New D.I.C Head
*

Joined: 8 Jun, 2007
Posts: 10


My Contributions
QUOTE(no2pencil @ 26 May, 2008 - 09:28 PM) *

What is your router doing with the 443 requests? Are they being sent to the correct server?

Can you view a lot of your firewall to verify that it is seeing traffic on port 443?


Good questions, I will look into that.
User is offlineProfile CardPM
+Quote Post

ramz
RE: SSL Configuration
27 May, 2008 - 04:09 AM
Post #4

New D.I.C Head
*

Joined: 8 Jun, 2007
Posts: 10


My Contributions
Sorted it out. This line was missing from my iptables:

-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 443 -j ACCEPT

Thanks for the nudge in the right direction.
User is offlineProfile CardPM
+Quote Post

Fast ReplyReply to this topicStart new topic
Time is now: 12/4/08 12:02PM

Live Help!

Tutorials

Programming

Web Development

Reference Sheets

Code Snippets

DIC Chatroom

Bye Bye Ads

Monthly Drawing

Thumb Drive

Top Contributors

Top 10 Kudos This Month