Apache SSL error: Re-negotiation handshake failed: Not accepted by client?

Leos Literak

I protect my wordpress administration by a client certificate. I had a trouble in march after upgrading from Wheezy to Jessie but it has been solved and everything ran well until my letsencrypt certificate expired.

I ran a letsencrypt client and it modified apache configuration files as well. The client certificate protected path stopped working on SSL error. Unfortunately I do not have a backup of previous configuration.

I spent few hours but without success. This answer probably explains the fault but I am unable to apply it in my scenerio.

ssl_engine_kernel.c(1908): [client 213.220.230.83:50427] AH02043: SSL virtual host for servername found
ssl_engine_kernel.c(1841): [client 213.220.230.83:50427] AH02041: Protocol: TLSv1.2, Cipher: ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)
ssl_engine_kernel.c(1841): [client 213.220.230.83:50428] AH02041: Protocol: TLSv1.2, Cipher: ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)
ssl_engine_kernel.c(243): [client 213.220.230.83:50427] AH02034: Initial (No.1) HTTPS request received for child 2 (server www.literak.cz:443)
ssl_engine_kernel.c(591): [client 213.220.230.83:50427] AH02255: Changed client verification type will force renegotiation
[client 213.220.230.83:50427] AH02221: Requesting connection re-negotiation
ssl_engine_kernel.c(791): [client 213.220.230.83:50427] AH02260: Performing full renegotiation: complete handshake protocol (client does support secure renegotiation)
[client 213.220.230.83:50427] AH02226: Awaiting re-negotiation handshake
ssl_engine_kernel.c(1908): [client 213.220.230.83:50427] AH02043: SSL virtual host for servername found
[client 213.220.230.83:50427] AH02261: Re-negotiation handshake failed: Not accepted by client!?

The configuration:

<IfModule mod_ssl.c>
NameVirtualHost 77.93.226.222:80
<VirtualHost 77.93.226.222:443>

  DocumentRoot /var/www-data/wordpress
  <Directory /var/www-data/wordpress>
          Options Indexes FollowSymLinks MultiViews
          AllowOverride All
          Order allow,deny
          allow from all
  </Directory>

  SSLCACertificateFile    /etc/apache2/ssl/leos.pem
    <Location /wp-admin>
      SSLVerifyClient require
      SSLVerifyDepth  1
    </Location>

  CustomLog ${APACHE_LOG_DIR}/access.log combined
  SSLCertificateFile /etc/letsencrypt/live//fullchain.pem
  SSLCertificateKeyFile /etc/letsencrypt/live/privkey.pem
  Include /etc/letsencrypt/options-ssl-apache.conf
</VirtualHost>
</IfModule>
Leos Literak

Ok, that is weird. I found this topic, where somebody had a problem when a certificate was not imported. I checked it and it was my case as well. The certificate disappeared from my chrome.

Collected from the Internet

Please contact [email protected] to delete if infringement.

edited at
0

Comments

0 comments
Login to comment

Related

From Dev

Error -- KIO Client Could not connect to host ... SSL negotiation failed

From Dev

500 SSL negotiation failed

From Dev

Fix SSL negotiation failed

From Dev

Symfony installation Error: curl: (35) SSL peer handshake failed, the server most likely requires a client certificate to connect

From Dev

Error installing Crashlytics - SSL peer handshake failed

From Dev

Failed to attach client certificate during ssl handshake in android

From Dev

RMI with SSL: Failed handshake

From Dev

davfs - SSL handshake failed: SSL error: sslv3 alert handshake failure

From Dev

Mailx SSL/TLS handshake failed: Unknown error -5938

From Dev

Android Webview getting ERROR_FAILED_SSL_HANDSHAKE with Paypal

From Dev

LWP::UserAgent and 500 SSL negotiation failed

From Dev

SSL Error: Bad handshake

From Dev

SSL handshake error

From Dev

Apache Http Client SSL certificate error

From Dev

SSL handshake failed SVN (no SSL certificate)

From Dev

Nginx reverse proxy error:14077438:SSL SSL_do_handshake() failed

From Dev

RECV TLSv1 ALERT: fatal, handshake_failure - ssl on client side failed before "hello server"

From Dev

Failed to dial: handshake failed: ssh: no common algorithms Error in ssh client for golang

From Dev

intermittent SSL handshake error nginx

From Dev

SSL handshake error in a JavaRMI application

From Dev

intermittent SSL handshake error nginx

From Dev

"Failed to complete SSL handshake: NSS error -5938." while connecting with the retrace server

From Dev

Cannot add APT repository: SSL handshake failed

From Dev

Apache: redirect to non SSL page if TLS negotiation fails

From Dev

Firefox does not offer client certificate: SSL_ERROR_HANDSHAKE_FAILURE_ALERT

From Dev

.NET Mutual SSL handshake 'Client Authentication'

From Dev

Boost Asio SSL Client Handshake Problems

From Dev

.NET Mutual SSL handshake 'Client Authentication'

From Dev

No client certificate was presented during SSL Handshake

Related Related

  1. 1

    Error -- KIO Client Could not connect to host ... SSL negotiation failed

  2. 2

    500 SSL negotiation failed

  3. 3

    Fix SSL negotiation failed

  4. 4

    Symfony installation Error: curl: (35) SSL peer handshake failed, the server most likely requires a client certificate to connect

  5. 5

    Error installing Crashlytics - SSL peer handshake failed

  6. 6

    Failed to attach client certificate during ssl handshake in android

  7. 7

    RMI with SSL: Failed handshake

  8. 8

    davfs - SSL handshake failed: SSL error: sslv3 alert handshake failure

  9. 9

    Mailx SSL/TLS handshake failed: Unknown error -5938

  10. 10

    Android Webview getting ERROR_FAILED_SSL_HANDSHAKE with Paypal

  11. 11

    LWP::UserAgent and 500 SSL negotiation failed

  12. 12

    SSL Error: Bad handshake

  13. 13

    SSL handshake error

  14. 14

    Apache Http Client SSL certificate error

  15. 15

    SSL handshake failed SVN (no SSL certificate)

  16. 16

    Nginx reverse proxy error:14077438:SSL SSL_do_handshake() failed

  17. 17

    RECV TLSv1 ALERT: fatal, handshake_failure - ssl on client side failed before "hello server"

  18. 18

    Failed to dial: handshake failed: ssh: no common algorithms Error in ssh client for golang

  19. 19

    intermittent SSL handshake error nginx

  20. 20

    SSL handshake error in a JavaRMI application

  21. 21

    intermittent SSL handshake error nginx

  22. 22

    "Failed to complete SSL handshake: NSS error -5938." while connecting with the retrace server

  23. 23

    Cannot add APT repository: SSL handshake failed

  24. 24

    Apache: redirect to non SSL page if TLS negotiation fails

  25. 25

    Firefox does not offer client certificate: SSL_ERROR_HANDSHAKE_FAILURE_ALERT

  26. 26

    .NET Mutual SSL handshake 'Client Authentication'

  27. 27

    Boost Asio SSL Client Handshake Problems

  28. 28

    .NET Mutual SSL handshake 'Client Authentication'

  29. 29

    No client certificate was presented during SSL Handshake

HotTag

Archive