SSLCert Install but FF returns ssl_error_rx_record_too_long

  • aewilliams
  • 05/29/09
  • Offline
Posted: Thu, 2010-07-08 18:22

I'm having trouble with apache after installing SSL cert #2 on my CentOS 5.5 server.

Here are my server specs: CentOS 5.5 Virtualmin GPL (all modules up to date) OpenSSL Apache2.2

Here are my steps so far: I got a third IP from linode. Configured it on eth0:1 moved private IP to eth0:2 Purchased 5domain UCC cert from GoDaddy. Configured it as I've done many times before. Godaddy confirms that it's installed correctly according to their testing tool. Configured VirtualHost as follows:

NameVirtualHost XX.XX.XX.56:443
<VirtualHost XX.XX.XX.56:443>
SuexecUserGroup #501 #502
ServerName ifmasa.org
ServerAlias www.ifmasa.org
ServerAlias webmail.ifmasa.org
ServerAlias admin.ifmasa.org
DocumentRoot /home/williamswebsites.com/public_html
ErrorLog /var/log/virtualmin/ifmasa.org_error_log
CustomLog /var/log/virtualmin/ifmasa.org_access_log "combined"
ScriptAlias /cgi-bin/ /home/williamswebsites.com/domains/ifmasa.org/cgi-bin/
DirectoryIndex index.html index.htm index.php index.php4 index.php5
<Directory "/home/williamswebsites.com/public_html">
Options -Indexes +IncludesNOEXEC +FollowSymLinks
allow from all
AllowOverride All
</Directory>
RewriteEngine on
RewriteCond %{HTTP_HOST} =webmail.ifmasa.org
RewriteRule ^(.<em>) https://ifmasa.org:20000/ [R]
RewriteCond %{HTTP_HOST} =admin.ifmasa.org
RewriteRule ^(.</em>) https://ifmasa.org:10000/ [R]
SSLEngine on
SSLCertificateFile /home/williamswebsites.com/domains/ifmasa.org/ssl.cert
SSLCertificateKeyFile /home/williamswebsites.com/domains/ifmasa.org/ssl.key
SSLCertificateChainFile /home/williamswebsites.com/domains/ifmasa.org/gd_bundle.crt
SSLCACertificateFile /home/williamswebsites.com/domains/ifmasa.org/ssl.ca
</VirtualHost>

Now if I go to https://www.ifmasa.org I get the following:

Secure Connection Failed
 
An error occurred during a connection to www.ifmasa.org.
 
SSL received a record that exceeded the maximum permissible length.
 
(Error code: ssl_error_rx_record_too_long)

However if I go to http://www.ifmasa.org:443 apache shows me the index. This leads me to believe that something is wrong with apache not the cert.

Any ideas? or questions for more info?

Thanks!