Re: Monit: Openssl engine error 156

[Martin Pala]

Hello,

the SSL error says:

        func 118                = SSL_F_SSL23_GET_CLIENT_HELLO
        reason 156      = SSL_R_HTTP_REQUEST

It seems that the SSL handshake failed ... Monit disabled SSLv2 and SSLv3 by 
default, if the client doesn't support TLS, it may fail (or the client didn't 
use HTTPS at all and tried to speak plain HTTP).

Regards,
Martin


> On 13 Apr 2016, at 11:12, Gavin Donald <address@hidden> wrote:
> 
> Hello,
> 
> I noticed today that my Monit HTTPD is not working. The web browser is giving 
> a 'connection  reset error' and the log file is showing the following:
> 
> error    : monit: Openssl engine error: error:1407609C:SSL 
> routines:func(118):reason(156)
> 
> I haven't been able to find much about this error and assume that a previous 
> update to OpenSSL has caused this to become an issue when Monit was 
> restarted. 
> 
> I have the following in monitrc:
> 
>     set httpd port 2812
>         ssl enable
>         pemfile /etc/ssl/localcerts/my-cert.nopass.pem
> 
> The certificate needs an intermediary certificate to run and that certificate 
> is in the same directory as my-cert.nopass.pem, I am not sure if that is part 
> of the problem. I don't know how to tell Monit about the intermediary 
> certificate if it is needed.
> 
> Does anyone know how I can fix this?
> 
> Thanks.
> 
> Gavin.
> --
> To unsubscribe:
> https://lists.nongnu.org/mailman/listinfo/monit-general