Page 1 of 1

Apache SSL: "Error code: ssl_error_rx_record_too_long"

Posted: Sun Dec 08, 2013 8:34 pm
by ^rooker
[PROBLEM]
I'm trying to setup SSL (https) on my server, but it's not working, and throws the following error in the browser (Firefox):
Secure Connection Failed

An error occurred during a connection to http://www.voch.at. SSL received a record that exceeded the maximum permissible length. (Error code: ssl_error_rx_record_too_long)

The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
Please contact the website owners to inform them of this problem. Alternatively, use the command found in the help menu to report this broken site.
Let's take a look at the certificate:

Code: Select all

$ openssl verify /etc/apache2/ssl/my_ssl-cert.crt 
/etc/apache2/ssl/my_ssl-cert.crt: C = AT, ST = Nieder\C3\83\C2\B6sterreich, L = xxx, O = xxx, OU = The Shadow (server), CN = http://www.das-werkstatt.com, emailAddress = xxx@xxx.com
error 18 at 0 depth lookup:self signed certificate
Except for the strange characters (Umlauts. YAY!) in the state name, and the warning that it's self-signed, it's okay.


[SOLUTION]
It was really bad luck, that I ran into this...
The server was moved to another IP, but the DNS entries have not yet updated the new IPs. Therefore, the webserver did a lookup of the hostname in the <VirtualHost> directive - to the old IP.

That's it :shock:

There are 2 ways to fix this:
  • Wait. When all DNS have updated the new records, the error will disappear.
  • Add the FQDN with the new IP to the server's /etc/hosts.