/ Zope / Apsis / Pound Mailing List / Archive / 2007 / 2007-10 / Logging SSL handshake problems

[ << ] [ >> ]

[ Timeout Problem, in firefox? / Rachel ... ] [ About 303 rewrite? / Pierre-Alain RIVIERE ... ]

Logging SSL handshake problems
Pär Tögenmark <par.togenmark(at)trustweaver.com>		 2007-10-10 16:13:35 [ FULL ] 
We are using pound 2.2.7 and requiring client certificates. One of our 
customers are experiencing handshake problems:

javax.net.ssl.SSLHandshakeException: Received fatal alert: 
handshake_failure 

The pound log does not have any information regarding the failing request
(LogLevel 2). Is the SSL negotiation logged somewhere? Is it possible to get
information about the client certificate presented by the client? (We suspect
they are using an un-trusted certificate, but we need to prove it.)

Thanks

Pär
Re: [Pound Mailing List] Logging SSL handshake problems
Robert Segall <roseg(at)apsis.ch>		 2007-10-17 10:35:40 [ FULL ] 
On Wed, 2007-10-10 at 16:13 +0200, Pär Tögenmark wrote:[...]

See in http.c around line 550: failed handshakes are not normally
logged, only bad certificates. You could enable the code that is
currently commented out.[...]
MailBoxer