SSL 库错误:336117909 错误:1408C095:SSL 例程:SSL3_GET_FINISHED:摘要检查失败

SSL 库错误:336117909 错误:1408C095:SSL 例程:SSL3_GET_FINISHED:摘要检查失败

握手过程中出现以下错误

[error] SSL Library Error: 336117909 error:1408C095:SSL 
routines:SSL3_GET_FINISHED:digest check failed
[error] [client client_ip] Re-negotiation handshake failed: Not accepted by  client!?
[error] [client client_ip] Re-negotiation request failed
[error] SSL Library Error: 336117909 error:1408C095:SSL    
routines:SSL3_GET_FINISHED:digest check failed 

以下是 httpd.conf 设置

            <VirtualHost ip:443>

            Header always set P3P "CP=\"NON DSP COR CURa TIA\""

            RewriteEngine on
            RewriteMap lowercase int:tolower
            RewriteRule /_redirect....:%{QUERY_STRING}} [R]

            #  Security Parameters - Using Rewrite to disable cross-site-scripting attacks
            RewriteCond %{REQUEST_METHOD} ^(TRACE|TRACK)
            RewriteRule .* - [F]

            #  General setup for the virtual host
            DocumentRoot "/path_to_doc_root"
            ServerName server_name
            ServerAdmin admin@server_name
            ErrorLog "path to error log"
            CustomLog "path to custom log" combined

            # SSL setup of the virtual host

            SSLEngine on
            SSLProtocol all -SSLv2 -SSLv3
            SSLCipherSuite ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:RC4:MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA
            SSLHonorCipherOrder on

            SSLCertificateFile "/path of cert file"
            SSLCertificateKeyFile "path of key"
            SSLCertificateChainFile "path of Full_.crt"

            SSLCACertificateFile /path of ca-bundle.crt
            SSLOptions +ExportCertData +OptRenegotiate

            <Location /secure >
                   ..
                   ..
                    SSLRequireSSL
                    SSLVerifyClient require
                    SSLVerifyDepth 10
                    SSLOptions +ExportCertData
            </Location>

            </VirtualHost>

上述设置工作正常。但在客户端升级 .net 框架(不确定是哪个版本)后,上述错误开始出现。我不确定为什么会出现此错误以及握手的哪一步失败了。我谷歌了一下,但找不到任何解释。

有人可以解释一下上述错误吗?以及我该如何纠正它。

任何帮助都将不胜感激。谢谢......

相关内容