Welcome to Dream.In.Code
Click Here
Getting Help is Easy!

Join 118,883 Programmers for FREE! Ask your question and get quick answers from experts. There are 2,030 online right now! We've got more than 500 tutorials and 2,000 snippets. Join and find out why Dream.In.Code is the #1 programming help community on the internet! Registration is fast and FREE... Join Now!



SSL Configuration

 
Reply to this topicStart new topic

SSL Configuration, Can only access from host computer

ramz
post 26 May, 2008 - 11:27 AM
Post #1


New D.I.C Head

*
Joined: 8 Jun, 2007
Posts: 10


My Contributions


Hello,

I am trying to set up an encrypted site, mostly as a learning tool at this stage. I have a self-signed certificate, and everything seems to work great when I access the site from a browser on the host computer, i.e. using

https://real.ip.address/

However, if I do the same thing from another computer, I cannot connect from a browser on a different machine. I am not sure what I am doing wrong, so any ideas would be appreciated.

Here is some additional information:

I have found that on the host machine (linux), the following commands work:
openssl s_client -connect real.ip.address:443 -state -debug
openssl s_client -connect localhost:443 -state -debug

[ give "Verify return code: 18 (self signed certificate)" ]

openssl s_client -connect real.ip.address:80 -state -debug
[ gives "Verify return code: 21 (unable to verify the first certificate)"]

openssl s_client -connect localhost:80 -state -debug
[error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol:s23_clnt.c:567:]

On another machine,
openssl s_client -connect real.ip.address:443 -state -debug
[hangs]
openssl s_client -connect real.ip.address:80 -state -debug
[ gives "Verify return code: 21 (unable to verify the first certificate)"]
User is offlineProfile CardPM

Go to the top of the page


no2pencil
post 26 May, 2008 - 09:28 PM
Post #2


Wet D.I.C.

Group Icon
Joined: 10 May, 2007
Posts: 5,525



Thanked 36 times

Dream Kudos: 2350

Expert In: Goofing Off

My Contributions


What is your router doing with the 443 requests? Are they being sent to the correct server?

Can you view a lot of your firewall to verify that it is seeing traffic on port 443?
User is online!Profile CardPM

Go to the top of the page

ramz
post 27 May, 2008 - 03:57 AM
Post #3


New D.I.C Head

*
Joined: 8 Jun, 2007
Posts: 10


My Contributions


QUOTE(no2pencil @ 26 May, 2008 - 09:28 PM) *

What is your router doing with the 443 requests? Are they being sent to the correct server?

Can you view a lot of your firewall to verify that it is seeing traffic on port 443?


Good questions, I will look into that.
User is offlineProfile CardPM

Go to the top of the page

ramz
post 27 May, 2008 - 05:09 AM
Post #4


New D.I.C Head

*
Joined: 8 Jun, 2007
Posts: 10


My Contributions


Sorted it out. This line was missing from my iptables:

-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 443 -j ACCEPT

Thanks for the nudge in the right direction.
User is offlineProfile CardPM

Go to the top of the page

Fast ReplyReply to this topicStart new topic
Time is now: 10/13/08 02:56AM

Live Help!

Tutorials

Programming

Web Development

Reference Sheets

Code Snippets

Bye Bye Ads

Free DIC T-Shirt

T-Shirt Example

Related Sites

Monthly Drawing

Thumb Drive

Partners

Top Contributors

Top 10 Kudos This Month