握手过程中出现错误
[error] SSL Library Error: 336117909 error:1408C095:SSL routines:SSL3_GET_FINISHED:digest check failed [error] [client client_ip] Re-negotiation handshake failed: Not accepted by client!? [error] [client client_ip] Re-negotiation request failed [error] SSL Library Error: 336117909 error:1408C095:SSL routines:SSL3_GET_FINISHED:digest check failed
下面是httpd.conf的设置
<VirtualHost ip:443> Header always set P3P "CP=\"NON DSP COR CURa TIA\"" RewriteEngine on RewriteMap lowercase int:tolower RewriteRule /_redirect....:%{QUERY_STRING}} [R] # Security Parameters - Using Rewrite to disable cross-site-scripting attacks RewriteCond %{REQUEST_METHOD} ^(TRACE|TRACK) RewriteRule .* - [F] # General setup for the virtual host DocumentRoot "/path_to_doc_root" ServerName server_name ServerAdmin admin@server_name ErrorLog "path to error log" CustomLog "path to custom log" combined # SSL setup of the virtual host SSLEngine on SSLProtocol all -SSLv2 -SSLv3 SSLCipherSuite ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:RC4:MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA SSLHonorCipherOrder on SSLCertificateFile "/path of cert file" SSLCertificateKeyFile "path of key" SSLCertificateChainFile "path of Full_.crt" SSLCACertificateFile /path of ca-bundle.crt SSLOptions +ExportCertData +OptRenegotiate <Location /secure > .. .. SSLRequireSSL SSLVerifyClient require SSLVerifyDepth 10 SSLOptions +ExportCertData </Location> </VirtualHost>
以上设置工作正常。 但客户端升级之后.net框架(不知道哪个版本),上面的错误开始到来。 我不确定为什么这个错误即将到来,握手的哪一步失败了。 我没有谷歌,但无法find任何解释。
有人可以解释一下上面的错误,我该怎么办才能纠正这个问题。
任何帮助非常感谢。谢谢….