握手过程中出现以下错误
[error] SSL Library Error: 336117909 error:1408C095:SSL
routines:SSL3_GET_FINISHED:digest check failed
[error] [client client_ip] Re-negotiation handshake failed: Not accepted by client!?
[error] [client client_ip] Re-negotiation request failed
[error] SSL Library Error: 336117909 error:1408C095:SSL
routines:SSL3_GET_FINISHED:digest check failed
以下是 httpd.conf 设置
<VirtualHost ip:443>
Header always set P3P "CP=\"NON DSP COR CURa TIA\""
RewriteEngine on
RewriteMap lowercase int:tolower
RewriteRule /_redirect....:%{QUERY_STRING}} [R]
# Security Parameters - Using Rewrite to disable cross-site-scripting attacks
RewriteCond %{REQUEST_METHOD} ^(TRACE|TRACK)
RewriteRule .* - [F]
# General setup for the virtual host
DocumentRoot "/path_to_doc_root"
ServerName server_name
ServerAdmin admin@server_name
ErrorLog "path to error log"
CustomLog "path to custom log" combined
# SSL setup of the virtual host
SSLEngine on
SSLProtocol all -SSLv2 -SSLv3
SSLCipherSuite ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:RC4:MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA
SSLHonorCipherOrder on
SSLCertificateFile "/path of cert file"
SSLCertificateKeyFile "path of key"
SSLCertificateChainFile "path of Full_.crt"
SSLCACertificateFile /path of ca-bundle.crt
SSLOptions +ExportCertData +OptRenegotiate
<Location /secure >
..
..
SSLRequireSSL
SSLVerifyClient require
SSLVerifyDepth 10
SSLOptions +ExportCertData
</Location>
</VirtualHost>
上述设置工作正常。但在客户端升级 .net 框架(不确定是哪个版本)后,上述错误开始出现。我不确定为什么会出现此错误以及握手的哪一步失败了。我谷歌了一下,但找不到任何解释。
有人可以解释一下上述错误吗?以及我该如何纠正它。
任何帮助都将不胜感激。谢谢......