Apache SSL: "Error code: ssl_error_rx_record_too_long"

Linux howto's, compile information, information on whatever we learned on working with linux, MACOs and - of course - Products of the big evil....
Post Reply
User avatar
^rooker
Site Admin
Posts: 1483
Joined: Fri Aug 29, 2003 8:39 pm

Apache SSL: "Error code: ssl_error_rx_record_too_long"

Post by ^rooker »

[PROBLEM]
I'm trying to setup SSL (https) on my server, but it's not working, and throws the following error in the browser (Firefox):
Secure Connection Failed

An error occurred during a connection to http://www.voch.at. SSL received a record that exceeded the maximum permissible length. (Error code: ssl_error_rx_record_too_long)

The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
Please contact the website owners to inform them of this problem. Alternatively, use the command found in the help menu to report this broken site.
Let's take a look at the certificate:

Code: Select all

$ openssl verify /etc/apache2/ssl/my_ssl-cert.crt 
/etc/apache2/ssl/my_ssl-cert.crt: C = AT, ST = Nieder\C3\83\C2\B6sterreich, L = xxx, O = xxx, OU = The Shadow (server), CN = http://www.das-werkstatt.com, emailAddress = xxx@xxx.com
error 18 at 0 depth lookup:self signed certificate
Except for the strange characters (Umlauts. YAY!) in the state name, and the warning that it's self-signed, it's okay.


[SOLUTION]
It was really bad luck, that I ran into this...
The server was moved to another IP, but the DNS entries have not yet updated the new IPs. Therefore, the webserver did a lookup of the hostname in the <VirtualHost> directive - to the old IP.

That's it :shock:

There are 2 ways to fix this:
  • Wait. When all DNS have updated the new records, the error will disappear.
  • Add the FQDN with the new IP to the server's /etc/hosts.
Jumping out of an airplane is not a basic instinct. Neither is breathing underwater. But put the two together and you're traveling through space!
Post Reply