I'm currently wrapping up a project but I'm now required to use SSL
for my APE server. Everything has been working fine until I've
implemented SSL on my web server (IIS).
I followed the instructions in http://www.ape-project.org/wiki/index.php/SSL_with_ape
I installed stunnel4 version 4.29-1
on the same server as my APE
Stunnel starts with no errors but when I run the Check tool bundled in
ape-jsf (which is also updated to support the secure parameter)
I fail at contacting https://ape.my-domain:442
When I check the stunnel logs I find the following:
2012.04.03 18:43:04 LOG3[2409:140692054951680]: SSL_accept: Peer
suddenly discon
nected
2012.04.03 18:43:04 LOG5[2409:140692054951680]: Connection reset: 0
bytes sent t
o SSL, 0 bytes sent to socket
2012.04.03 18:43:04 LOG7[2409:140692054951680]: ape finished (0 left)
I'm finding it difficult to find out what exactly is failing during
the test.
Could any one who successfully setup SSL with APE share their
experience?
Been going through the group but haven't been able to find anything.
Any help is greatly appreciated!
I realized in my previous post I placed the port as 443. That was just
a typo, my configuration has the port set to 442, same port that is
set in my apeClientJS.js
so my stunnel.conf should be:
I still haven't been able to get stunnel to work with APE. I've been
reading what I could find in the internet, but no solution yet.
Could someone share what certificates they have installed in their web
server and stunnel server.
I'm thinking my problem may lie with the certificates I have. As of
now I'm using certificates made with OpenSSL.
If this works, dig into the jsf settings. Otherwise, search for issues on server.
For the server certificate: you need two of them. One for the apache serving the files (yourdomain.com) and one wildcard for stunnel (*. ape.your-domain.com). Stunnel works with bundle file, which includes your certificate, ca certificate and intermediate certificates, if they exist. Add foreground=yes or check the stunnel error log for errors when you run it.
Matija
On 10 April 2012 14:04, Gino <gin...@gmail.com> wrote:
> I realized in my previous post I placed the port as 443. That was just > a typo, my configuration has the port set to 442, same port that is > set in my apeClientJS.js > so my stunnel.conf should be:
> I still haven't been able to get stunnel to work with APE. I've been > reading what I could find in the internet, but no solution yet. > Could someone share what certificates they have installed in their web > server and stunnel server. > I'm thinking my problem may lie with the certificates I have. As of > now I'm using certificates made with OpenSSL.
> I hope someone can help!
> -- > You received this message because you are subscribed to the Google > Groups "APE Project" group. > To post to this group, send email to ape-project@googlegroups.com > To unsubscribe from this group, send email to > ape-project+unsubscribe@googlegroups.com > For more options, visit this group at > http://groups.google.com/group/ape-project?hl=en > --- > APE Project (Ajax Push Engine) > Official website : http://www.ape-project.org/ > Git Hub : http://github.com/APE-Project/
I tried opening my browser first to http://0.ape.my-domain.com:6969 and I immediately get the response from APE with the no command given
message.
Then I tried https://0.ape.your-domain.com:442, I get the same results
but it takes extremely long to get a response. It's probably around 1
min until I get the same result.
Based on the logs I see messages like ape connected remote server from
127.0.0.1:60001, and since I get a response I eventually get a
response I take it stunnel and APE is communicating?
But I also noticed the following in the logs:
2012.04.11 12:30:36 LOG7[2409:140692054951680]: Remote FD=15
initialized
2012.04.11 12:30:36 LOG7[2409:140692054951680]: TCP_NODELAY option set
on remote socket
2012.04.11 12:30:36 LOG7[2409:140692054951680]: Socket closed on read
2012.04.11 12:30:36 LOG7[2409:140692054951680]: SSL write shutdown
2012.04.11 12:30:36 LOG7[2409:140692054951680]: SSL alert (write):
warning: close notify
2012.04.11 12:30:36 LOG6[2409:140692054951680]: SSL_shutdown
successfully sent close_notify
2012.04.11 12:30:38 LOG3[2409:140692054882048]: SSL_accept: Peer
suddenly disconnected
2012.04.11 12:30:38 LOG5[2409:140692054882048]: Connection reset: 0
bytes sent to SSL, 0 bytes sent to socket
2012.04.11 12:30:38 LOG7[2409:140692054882048]: ape finished (1 left)
2012.04.11 12:31:36 LOG6[2409:140692054951680]: s_poll_wait timeout:
connectionclose
2012.04.11 12:31:36 LOG5[2409:140692054951680]: Connection closed: 395
bytes sent to SSL, 387 bytes sent to socket
It says that Peer is suddenly disconnected. Is that normal?
The web server I have to use is IIS. It currently has the my-
domain.com cert. In stunnel I placed 3 certs, my-domain.com, *.my-
domain.com, *.ape.my-domian.com.
The wild card certs I made using OpenSSL for now. Would this affect my
setup?
On Apr 11, 4:11 am, Matija Hiti <matija.h...@gmail.com> wrote:
> If this works, dig into the jsf settings. Otherwise, search for issues on
> server.
> For the server certificate: you need two of them. One for the apache
> serving the files (yourdomain.com) and one wildcard for stunnel (*.
> ape.your-domain.com). Stunnel works with bundle file, which includes your
> certificate, ca certificate and intermediate certificates, if they exist.
> Add foreground=yes or check the stunnel error log for errors when you run
> it.
> Matija
> On 10 April 2012 14:04, Gino <gin...@gmail.com> wrote:
> > I realized in my previous post I placed the port as 443. That was just
> > a typo, my configuration has the port set to 442, same port that is
> > set in my apeClientJS.js
> > so my stunnel.conf should be:
> > I still haven't been able to get stunnel to work with APE. I've been
> > reading what I could find in the internet, but no solution yet.
> > Could someone share what certificates they have installed in their web
> > server and stunnel server.
> > I'm thinking my problem may lie with the certificates I have. As of
> > now I'm using certificates made with OpenSSL.
> > I hope someone can help!
> > --
> > You received this message because you are subscribed to the Google
> > Groups "APE Project" group.
> > To post to this group, send email to ape-project@googlegroups.com
> > To unsubscribe from this group, send email to
> > ape-project+unsubscribe@googlegroups.com
> > For more options, visit this group at
> >http://groups.google.com/group/ape-project?hl=en > > ---
> > APE Project (Ajax Push Engine)
> > Official website :http://www.ape-project.org/ > > Git Hub :http://github.com/APE-Project/
> I tried opening my browser first to http://0.ape.my-domain.com:6969 > and I immediately get the response from APE with the no command given > message. > Then I tried https://0.ape.your-domain.com:442, I get the same results > but it takes extremely long to get a response. It's probably around 1 > min until I get the same result.
> Based on the logs I see messages like ape connected remote server from > 127.0.0.1:60001, and since I get a response I eventually get a > response I take it stunnel and APE is communicating?
> But I also noticed the following in the logs:
> 2012.04.11 12:30:36 LOG7[2409:140692054951680]: Remote FD=15 > initialized > 2012.04.11 12:30:36 LOG7[2409:140692054951680]: TCP_NODELAY option set > on remote socket > 2012.04.11 12:30:36 LOG7[2409:140692054951680]: Socket closed on read > 2012.04.11 12:30:36 LOG7[2409:140692054951680]: SSL write shutdown > 2012.04.11 12:30:36 LOG7[2409:140692054951680]: SSL alert (write): > warning: close notify > 2012.04.11 12:30:36 LOG6[2409:140692054951680]: SSL_shutdown > successfully sent close_notify > 2012.04.11 12:30:38 LOG3[2409:140692054882048]: SSL_accept: Peer > suddenly disconnected > 2012.04.11 12:30:38 LOG5[2409:140692054882048]: Connection reset: 0 > bytes sent to SSL, 0 bytes sent to socket > 2012.04.11 12:30:38 LOG7[2409:140692054882048]: ape finished (1 left) > 2012.04.11 12:31:36 LOG6[2409:140692054951680]: s_poll_wait timeout: > connectionclose > 2012.04.11 12:31:36 LOG5[2409:140692054951680]: Connection closed: 395 > bytes sent to SSL, 387 bytes sent to socket
> It says that Peer is suddenly disconnected. Is that normal?
> The web server I have to use is IIS. It currently has the my- > domain.com cert. In stunnel I placed 3 certs, my-domain.com, *.my- > domain.com, *.ape.my-domian.com. > The wild card certs I made using OpenSSL for now. Would this affect my > setup?
> > If this works, dig into the jsf settings. Otherwise, search for issues on > > server.
> > For the server certificate: you need two of them. One for the apache > > serving the files (yourdomain.com) and one wildcard for stunnel (*. > > ape.your-domain.com). Stunnel works with bundle file, which includes > your > > certificate, ca certificate and intermediate certificates, if they exist. > > Add foreground=yes or check the stunnel error log for errors when you run > > it.
> > Matija
> > On 10 April 2012 14:04, Gino <gin...@gmail.com> wrote:
> > > I realized in my previous post I placed the port as 443. That was just > > > a typo, my configuration has the port set to 442, same port that is > > > set in my apeClientJS.js > > > so my stunnel.conf should be:
> > > I still haven't been able to get stunnel to work with APE. I've been > > > reading what I could find in the internet, but no solution yet. > > > Could someone share what certificates they have installed in their web > > > server and stunnel server. > > > I'm thinking my problem may lie with the certificates I have. As of > > > now I'm using certificates made with OpenSSL.
> > > I hope someone can help!
> > > -- > > > You received this message because you are subscribed to the Google > > > Groups "APE Project" group. > > > To post to this group, send email to ape-project@googlegroups.com > > > To unsubscribe from this group, send email to > > > ape-project+unsubscribe@googlegroups.com > > > For more options, visit this group at > > >http://groups.google.com/group/ape-project?hl=en > > > --- > > > APE Project (Ajax Push Engine) > > > Official website :http://www.ape-project.org/ > > > Git Hub :http://github.com/APE-Project/
> -- > You received this message because you are subscribed to the Google > Groups "APE Project" group. > To post to this group, send email to ape-project@googlegroups.com > To unsubscribe from this group, send email to > ape-project+unsubscribe@googlegroups.com > For more options, visit this group at > http://groups.google.com/group/ape-project?hl=en > --- > APE Project (Ajax Push Engine) > Official website : http://www.ape-project.org/ > Git Hub : http://github.com/APE-Project/
This e-mail message does not imply or cause any obligation, unless it is provided by a previous written agreement. This message is confidential: if you have received it by mistake, please advise immediately the sender by e-mail and destroy the message and its attachments. You are hereby notified that any unauthorized use of the content of this message could constitute a criminal offence. Thank you.
>> I tried opening my browser first to http://0.ape.my-domain.com:6969 >> and I immediately get the response from APE with the no command given >> message. >> Then I tried https://0.ape.your-domain.com:442, I get the same results >> but it takes extremely long to get a response. It's probably around 1 >> min until I get the same result.
>> Based on the logs I see messages like ape connected remote server from >> 127.0.0.1:60001, and since I get a response I eventually get a >> response I take it stunnel and APE is communicating?
>> But I also noticed the following in the logs:
>> 2012.04.11 12:30:36 LOG7[2409:140692054951680]: Remote FD=15 >> initialized >> 2012.04.11 12:30:36 LOG7[2409:140692054951680]: TCP_NODELAY option set >> on remote socket >> 2012.04.11 12:30:36 LOG7[2409:140692054951680]: Socket closed on read >> 2012.04.11 12:30:36 LOG7[2409:140692054951680]: SSL write shutdown >> 2012.04.11 12:30:36 LOG7[2409:140692054951680]: SSL alert (write): >> warning: close notify >> 2012.04.11 12:30:36 LOG6[2409:140692054951680]: SSL_shutdown >> successfully sent close_notify >> 2012.04.11 12:30:38 LOG3[2409:140692054882048]: SSL_accept: Peer >> suddenly disconnected >> 2012.04.11 12:30:38 LOG5[2409:140692054882048]: Connection reset: 0 >> bytes sent to SSL, 0 bytes sent to socket >> 2012.04.11 12:30:38 LOG7[2409:140692054882048]: ape finished (1 left) >> 2012.04.11 12:31:36 LOG6[2409:140692054951680]: s_poll_wait timeout: >> connectionclose >> 2012.04.11 12:31:36 LOG5[2409:140692054951680]: Connection closed: 395 >> bytes sent to SSL, 387 bytes sent to socket
>> It says that Peer is suddenly disconnected. Is that normal?
>> The web server I have to use is IIS. It currently has the my- >> domain.com cert. In stunnel I placed 3 certs, my-domain.com, *.my- >> domain.com, *.ape.my-domian.com. >> The wild card certs I made using OpenSSL for now. Would this affect my >> setup?
>> > If this works, dig into the jsf settings. Otherwise, search for issues >> on >> > server.
>> > For the server certificate: you need two of them. One for the apache >> > serving the files (yourdomain.com) and one wildcard for stunnel (*. >> > ape.your-domain.com). Stunnel works with bundle file, which includes >> your >> > certificate, ca certificate and intermediate certificates, if they >> exist. >> > Add foreground=yes or check the stunnel error log for errors when you >> run >> > it.
>> > Matija
>> > On 10 April 2012 14:04, Gino <gin...@gmail.com> wrote:
>> > > I realized in my previous post I placed the port as 443. That was just >> > > a typo, my configuration has the port set to 442, same port that is >> > > set in my apeClientJS.js >> > > so my stunnel.conf should be:
>> > > I still haven't been able to get stunnel to work with APE. I've been >> > > reading what I could find in the internet, but no solution yet. >> > > Could someone share what certificates they have installed in their web >> > > server and stunnel server. >> > > I'm thinking my problem may lie with the certificates I have. As of >> > > now I'm using certificates made with OpenSSL.
>> > > I hope someone can help!
>> > > -- >> > > You received this message because you are subscribed to the Google >> > > Groups "APE Project" group. >> > > To post to this group, send email to ape-project@googlegroups.com >> > > To unsubscribe from this group, send email to >> > > ape-project+unsubscribe@googlegroups.com >> > > For more options, visit this group at >> > >http://groups.google.com/group/ape-project?hl=en >> > > --- >> > > APE Project (Ajax Push Engine) >> > > Official website :http://www.ape-project.org/ >> > > Git Hub :http://github.com/APE-Project/
>> -- >> You received this message because you are subscribed to the Google >> Groups "APE Project" group. >> To post to this group, send email to ape-project@googlegroups.com >> To unsubscribe from this group, send email to >> ape-project+unsubscribe@googlegroups.com >> For more options, visit this group at >> http://groups.google.com/group/ape-project?hl=en >> --- >> APE Project (Ajax Push Engine) >> Official website : http://www.ape-project.org/ >> Git Hub : http://github.com/APE-Project/
> This e-mail message does not imply or cause any obligation, unless it is > provided by a previous written agreement. This message is confidential: if > you have received it by mistake, please advise immediately the sender by > e-mail and destroy the message and its attachments. You are hereby notified > that any unauthorized use of the content of this message could constitute a > criminal offence. Thank you.
> -- > You received this message because you are subscribed to the Google > Groups "APE Project" group. > To post to this group, send email to ape-project@googlegroups.com > To unsubscribe from this group, send email to > ape-project+unsubscribe@googlegroups.com > For more options, visit this group at > http://groups.google.com/group/ape-project?hl=en > --- > APE Project (Ajax Push Engine) > Official website : http://www.ape-project.org/ > Git Hub : http://github.com/APE-Project/
>>> I tried opening my browser first to http://0.ape.my-domain.com:6969 >>> and I immediately get the response from APE with the no command given >>> message. >>> Then I tried https://0.ape.your-domain.com:442, I get the same results >>> but it takes extremely long to get a response. It's probably around 1 >>> min until I get the same result.
>>> Based on the logs I see messages like ape connected remote server from >>> 127.0.0.1:60001, and since I get a response I eventually get a >>> response I take it stunnel and APE is communicating?
>>> But I also noticed the following in the logs:
>>> 2012.04.11 12:30:36 LOG7[2409:140692054951680]: Remote FD=15 >>> initialized >>> 2012.04.11 12:30:36 LOG7[2409:140692054951680]: TCP_NODELAY option set >>> on remote socket >>> 2012.04.11 12:30:36 LOG7[2409:140692054951680]: Socket closed on read >>> 2012.04.11 12:30:36 LOG7[2409:140692054951680]: SSL write shutdown >>> 2012.04.11 12:30:36 LOG7[2409:140692054951680]: SSL alert (write): >>> warning: close notify >>> 2012.04.11 12:30:36 LOG6[2409:140692054951680]: SSL_shutdown >>> successfully sent close_notify >>> 2012.04.11 12:30:38 LOG3[2409:140692054882048]: SSL_accept: Peer >>> suddenly disconnected >>> 2012.04.11 12:30:38 LOG5[2409:140692054882048]: Connection reset: 0 >>> bytes sent to SSL, 0 bytes sent to socket >>> 2012.04.11 12:30:38 LOG7[2409:140692054882048]: ape finished (1 left) >>> 2012.04.11 12:31:36 LOG6[2409:140692054951680]: s_poll_wait timeout: >>> connectionclose >>> 2012.04.11 12:31:36 LOG5[2409:140692054951680]: Connection closed: 395 >>> bytes sent to SSL, 387 bytes sent to socket
>>> It says that Peer is suddenly disconnected. Is that normal?
>>> The web server I have to use is IIS. It currently has the my- >>> domain.com cert. In stunnel I placed 3 certs, my-domain.com, *.my- >>> domain.com, *.ape.my-domian.com. >>> The wild card certs I made using OpenSSL for now. Would this affect my >>> setup?
>>> > If this works, dig into the jsf settings. Otherwise, search for issues >>> on >>> > server.
>>> > For the server certificate: you need two of them. One for the apache >>> > serving the files (yourdomain.com) and one wildcard for stunnel (*. >>> > ape.your-domain.com). Stunnel works with bundle file, which includes >>> your >>> > certificate, ca certificate and intermediate certificates, if they >>> exist. >>> > Add foreground=yes or check the stunnel error log for errors when you >>> run >>> > it.
>>> > Matija
>>> > On 10 April 2012 14:04, Gino <gin...@gmail.com> wrote:
>>> > > I realized in my previous post I placed the port as 443. That was >>> just >>> > > a typo, my configuration has the port set to 442, same port that is >>> > > set in my apeClientJS.js >>> > > so my stunnel.conf should be:
>>> > > I still haven't been able to get stunnel to work with APE. I've been >>> > > reading what I could find in the internet, but no solution yet. >>> > > Could someone share what certificates they have installed in their >>> web >>> > > server and stunnel server. >>> > > I'm thinking my problem may lie with the certificates I have. As of >>> > > now I'm using certificates made with OpenSSL.
>>> > > I hope someone can help!
>>> > > -- >>> > > You received this message because you are subscribed to the Google >>> > > Groups "APE Project" group. >>> > > To post to this group, send email to ape-project@googlegroups.com >>> > > To unsubscribe from this group, send email to >>> > > ape-project+unsubscribe@googlegroups.com >>> > > For more options, visit this group at >>> > >http://groups.google.com/group/ape-project?hl=en >>> > > --- >>> > > APE Project (Ajax Push Engine) >>> > > Official website :http://www.ape-project.org/ >>> > > Git Hub :http://github.com/APE-Project/
>>> -- >>> You received this message because you are subscribed to the Google >>> Groups "APE Project" group. >>> To post to this group, send email to ape-project@googlegroups.com >>> To unsubscribe from this group, send email to >>> ape-project+unsubscribe@googlegroups.com >>> For more options, visit this group at >>> http://groups.google.com/group/ape-project?hl=en >>> --- >>> APE Project (Ajax Push Engine) >>> Official website : http://www.ape-project.org/ >>> Git Hub : http://github.com/APE-Project/
>> This e-mail message does not imply or cause any obligation, unless it is >> provided by a previous written agreement. This message is confidential: if >> you have received it by mistake, please advise immediately the sender by >> e-mail and destroy the message and its attachments. You are hereby notified >> that any unauthorized use of the content of this message could constitute a >> criminal offence. Thank you.
>> -- >> You received this message because you are subscribed to the Google >> Groups "APE Project" group. >> To post to this group, send email to ape-project@googlegroups.com >> To unsubscribe from this group, send email to >> ape-project+unsubscribe@googlegroups.com >> For more options, visit this group at >> http://groups.google.com/group/ape-project?hl=en >> --- >> APE Project (Ajax Push Engine) >> Official website : http://www.ape-project.org/ >> Git Hub : http://github.com/APE-Project/
> -- > You received this message because you are subscribed to the Google > Groups "APE Project" group. > To post to this group, send email to ape-project@googlegroups.com > To unsubscribe from this group, send email to > ape-project+unsubscribe@googlegroups.com > For more options, visit this group at > http://groups.google.com/group/ape-project?hl=en > --- > APE Project (Ajax Push Engine) > Official website : http://www.ape-project.org/ > Git Hub : http://github.com/APE-Project/
This e-mail message does not imply or cause any obligation, unless it is provided by a previous written agreement. This message is confidential: if you have received it by mistake, please advise immediately the sender by e-mail and destroy the message and its attachments. You are hereby notified that any unauthorized use of the content of this message could constitute a criminal offence. Thank you.
>>>> I tried opening my browser first to http://0.ape.my-domain.com:6969 >>>> and I immediately get the response from APE with the no command given >>>> message. >>>> Then I tried https://0.ape.your-domain.com:442, I get the same results >>>> but it takes extremely long to get a response. It's probably around 1 >>>> min until I get the same result.
>>>> Based on the logs I see messages like ape connected remote server from >>>> 127.0.0.1:60001, and since I get a response I eventually get a >>>> response I take it stunnel and APE is communicating?
>>>> But I also noticed the following in the logs:
>>>> 2012.04.11 12:30:36 LOG7[2409:140692054951680]: Remote FD=15 >>>> initialized >>>> 2012.04.11 12:30:36 LOG7[2409:140692054951680]: TCP_NODELAY option set >>>> on remote socket >>>> 2012.04.11 12:30:36 LOG7[2409:140692054951680]: Socket closed on read >>>> 2012.04.11 12:30:36 LOG7[2409:140692054951680]: SSL write shutdown >>>> 2012.04.11 12:30:36 LOG7[2409:140692054951680]: SSL alert (write): >>>> warning: close notify >>>> 2012.04.11 12:30:36 LOG6[2409:140692054951680]: SSL_shutdown >>>> successfully sent close_notify >>>> 2012.04.11 12:30:38 LOG3[2409:140692054882048]: SSL_accept: Peer >>>> suddenly disconnected >>>> 2012.04.11 12:30:38 LOG5[2409:140692054882048]: Connection reset: 0 >>>> bytes sent to SSL, 0 bytes sent to socket >>>> 2012.04.11 12:30:38 LOG7[2409:140692054882048]: ape finished (1 left) >>>> 2012.04.11 12:31:36 LOG6[2409:140692054951680]: s_poll_wait timeout: >>>> connectionclose >>>> 2012.04.11 12:31:36 LOG5[2409:140692054951680]: Connection closed: 395 >>>> bytes sent to SSL, 387 bytes sent to socket
>>>> It says that Peer is suddenly disconnected. Is that normal?
>>>> The web server I have to use is IIS. It currently has the my- >>>> domain.com cert. In stunnel I placed 3 certs, my-domain.com, *.my- >>>> domain.com, *.ape.my-domian.com. >>>> The wild card certs I made using OpenSSL for now. Would this affect my >>>> setup?
>>>> > If this works, dig into the jsf settings. Otherwise, search for >>>> issues on >>>> > server.
>>>> > For the server certificate: you need two of them. One for the apache >>>> > serving the files (yourdomain.com) and one wildcard for stunnel (*. >>>> > ape.your-domain.com). Stunnel works with bundle file, which includes >>>> your >>>> > certificate, ca certificate and intermediate certificates, if they >>>> exist. >>>> > Add foreground=yes or check the stunnel error log for errors when you >>>> run >>>> > it.
>>>> > Matija
>>>> > On 10 April 2012 14:04, Gino <gin...@gmail.com> wrote:
>>>> > > I realized in my previous post I placed the port as 443. That was >>>> just >>>> > > a typo, my configuration has the port set to 442, same port that is >>>> > > set in my apeClientJS.js >>>> > > so my stunnel.conf should be:
>>>> > > I still haven't been able to get stunnel to work with APE. I've been >>>> > > reading what I could find in the internet, but no solution yet. >>>> > > Could someone share what certificates they have installed in their >>>> web >>>> > > server and stunnel server. >>>> > > I'm thinking my problem may lie with the certificates I have. As of >>>> > > now I'm using certificates made with OpenSSL.
>>>> > > I hope someone can help!
>>>> > > -- >>>> > > You received this message because you are subscribed to the Google >>>> > > Groups "APE Project" group. >>>> > > To post to this group, send email to ape-project@googlegroups.com >>>> > > To unsubscribe from this group, send email to >>>> > > ape-project+unsubscribe@googlegroups.com >>>> > > For more options, visit this group at >>>> > >http://groups.google.com/group/ape-project?hl=en >>>> > > --- >>>> > > APE Project (Ajax Push Engine) >>>> > > Official website :http://www.ape-project.org/ >>>> > > Git Hub :http://github.com/APE-Project/
>>>> -- >>>> You received this message because you are subscribed to the Google >>>> Groups "APE Project" group. >>>> To post to this group, send email to ape-project@googlegroups.com >>>> To unsubscribe from this group, send email to >>>> ape-project+unsubscribe@googlegroups.com >>>> For more options, visit this group at >>>> http://groups.google.com/group/ape-project?hl=en >>>> --- >>>> APE Project (Ajax Push Engine) >>>> Official website : http://www.ape-project.org/ >>>> Git Hub : http://github.com/APE-Project/
>>> This e-mail message does not imply or cause any obligation, unless it is >>> provided by a previous written agreement. This message is confidential: if >>> you have received it by mistake, please advise immediately the sender by >>> e-mail and destroy the message and its attachments. You are hereby notified >>> that any unauthorized use of the content of this message could constitute a >>> criminal offence. Thank you.
>>> -- >>> You received this message because you are subscribed to the Google >>> Groups "APE Project" group. >>> To post to this group, send email to ape-project@googlegroups.com >>> To unsubscribe from this group, send email to >>> ape-project+unsubscribe@googlegroups.com >>> For more options, visit this group at >>> http://groups.google.com/group/ape-project?hl=en >>> --- >>> APE Project (Ajax Push Engine) >>> Official website : http://www.ape-project.org/ >>> Git Hub : http://github.com/APE-Project/
>> -- >> You received this message because you are subscribed to the Google >> Groups "APE Project" group. >> To post to this group, send email to ape-project@googlegroups.com >> To unsubscribe from this group, send email to >> ape-project+unsubscribe@googlegroups.com >> For more options, visit this group at >> http://groups.google.com/group/ape-project?hl=en >> --- >> APE Project (Ajax Push Engine) >> Official website : http://www.ape-project.org/ >> Git Hub : http://github.com/APE-Project/
> This e-mail message does not imply or cause any obligation, unless it is > provided by a previous written agreement. This message is confidential: if > you have received it by mistake, please advise immediately the sender by > e-mail and destroy the message and its attachments. You are hereby notified > that any unauthorized use of the content of this message could constitute a > criminal offence. Thank you.
This e-mail message does not imply or cause any obligation, unless it is provided by a previous written agreement. This message is confidential: if you have received it by mistake, please advise immediately the sender by e-mail and destroy the message and its attachments. You are hereby notified that any unauthorized use of the content of this message could constitute a criminal offence. Thank you.
>>>>> I tried opening my browser first to http://0.ape.my-domain.com:6969 >>>>> and I immediately get the response from APE with the no command given >>>>> message. >>>>> Then I tried https://0.ape.your-domain.com:442, I get the same results >>>>> but it takes extremely long to get a response. It's probably around 1 >>>>> min until I get the same result.
>>>>> Based on the logs I see messages like ape connected remote server from >>>>> 127.0.0.1:60001, and since I get a response I eventually get a >>>>> response I take it stunnel and APE is communicating?
>>>>> But I also noticed the following in the logs:
>>>>> 2012.04.11 12:30:36 LOG7[2409:140692054951680]: Remote FD=15 >>>>> initialized >>>>> 2012.04.11 12:30:36 LOG7[2409:140692054951680]: TCP_NODELAY option set >>>>> on remote socket >>>>> 2012.04.11 12:30:36 LOG7[2409:140692054951680]: Socket closed on read >>>>> 2012.04.11 12:30:36 LOG7[2409:140692054951680]: SSL write shutdown >>>>> 2012.04.11 12:30:36 LOG7[2409:140692054951680]: SSL alert (write): >>>>> warning: close notify >>>>> 2012.04.11 12:30:36 LOG6[2409:140692054951680]: SSL_shutdown >>>>> successfully sent close_notify >>>>> 2012.04.11 12:30:38 LOG3[2409:140692054882048]: SSL_accept: Peer >>>>> suddenly disconnected >>>>> 2012.04.11 12:30:38 LOG5[2409:140692054882048]: Connection reset: 0 >>>>> bytes sent to SSL, 0 bytes sent to socket >>>>> 2012.04.11 12:30:38 LOG7[2409:140692054882048]: ape finished (1 left) >>>>> 2012.04.11 12:31:36 LOG6[2409:140692054951680]: s_poll_wait timeout: >>>>> connectionclose >>>>> 2012.04.11 12:31:36 LOG5[2409:140692054951680]: Connection closed: 395 >>>>> bytes sent to SSL, 387 bytes sent to socket
>>>>> It says that Peer is suddenly disconnected. Is that normal?
>>>>> The web server I have to use is IIS. It currently has the my- >>>>> domain.com cert. In stunnel I placed 3 certs, my-domain.com, *.my- >>>>> domain.com, *.ape.my-domian.com. >>>>> The wild card certs I made using OpenSSL for now. Would this affect my >>>>> setup?
>>>>> > If this works, dig into the jsf settings. Otherwise, search for >>>>> issues on >>>>> > server.
>>>>> > For the server certificate: you need two of them. One for the apache >>>>> > serving the files (yourdomain.com) and one wildcard for stunnel (*. >>>>> > ape.your-domain.com). Stunnel works with bundle file, which >>>>> includes your >>>>> > certificate, ca certificate and intermediate certificates, if they >>>>> exist. >>>>> > Add foreground=yes or check the stunnel error log for errors when >>>>> you run >>>>> > it.
>>>>> > Matija
>>>>> > On 10 April 2012 14:04, Gino <gin...@gmail.com> wrote:
>>>>> > > I realized in my previous post I placed the port as 443. That was >>>>> just >>>>> > > a typo, my configuration has the port set to 442, same port that is >>>>> > > set in my apeClientJS.js >>>>> > > so my stunnel.conf should be:
>>>>> > > I still haven't been able to get stunnel to work with APE. I've >>>>> been >>>>> > > reading what I could find in the internet, but no solution yet. >>>>> > > Could someone share what certificates they have installed in their >>>>> web >>>>> > > server and stunnel server. >>>>> > > I'm thinking my problem may lie with the certificates I have. As >>>>> of >>>>> > > now I'm using certificates made with OpenSSL.
>>>>> > > I hope someone can help!
>>>>> > > -- >>>>> > > You received this message because you are subscribed to the Google >>>>> > > Groups "APE Project" group. >>>>> > > To post to this group, send email to ape-project@googlegroups.com >>>>> > > To unsubscribe from this group, send email to >>>>> > > ape-project+unsubscribe@googlegroups.com >>>>> > > For more options, visit this group at >>>>> > >http://groups.google.com/group/ape-project?hl=en >>>>> > > --- >>>>> > > APE Project (Ajax Push Engine) >>>>> > > Official website :http://www.ape-project.org/ >>>>> > > Git Hub :http://github.com/APE-Project/
>>>>> -- >>>>> You received this message because you are subscribed to the Google >>>>> Groups "APE Project" group. >>>>> To post to this group, send email to ape-project@googlegroups.com >>>>> To unsubscribe from this group, send email to >>>>> ape-project+unsubscribe@googlegroups.com >>>>> For more options, visit this group at >>>>> http://groups.google.com/group/ape-project?hl=en >>>>> --- >>>>> APE Project (Ajax Push Engine) >>>>> Official website : http://www.ape-project.org/ >>>>> Git Hub : http://github.com/APE-Project/
>>>> This e-mail message does not imply or cause any obligation, unless it >>>> is provided by a previous written agreement. This message is confidential: >>>> if you have received it by mistake, please advise immediately the sender by >>>> e-mail and destroy the message and its attachments. You are hereby notified >>>> that any unauthorized use of the content of this message could constitute a >>>> criminal offence. Thank you.
>>>> -- >>>> You received this message because you are subscribed to the Google >>>> Groups "APE Project" group. >>>> To post to this group, send email to ape-project@googlegroups.com >>>> To unsubscribe from this group, send email to >>>> ape-project+unsubscribe@googlegroups.com >>>> For more options, visit this group at >>>> http://groups.google.com/group/ape-project?hl=en >>>> --- >>>> APE Project (Ajax Push Engine) >>>> Official website : http://www.ape-project.org/ >>>> Git Hub : http://github.com/APE-Project/
>>> -- >>> You received this message because you are subscribed to the Google >>> Groups "APE Project" group. >>> To post to this group, send email to ape-project@googlegroups.com >>> To unsubscribe from this group, send email to >>> ape-project+unsubscribe@googlegroups.com >>> For more options, visit this group at >>> http://groups.google.com/group/ape-project?hl=en >>> --- >>> APE Project (Ajax Push Engine) >>> Official website : http://www.ape-project.org/ >>> Git Hub : http://github.com/APE-Project/
>> This e-mail message does not imply or cause any obligation, unless it is >> provided by a previous written agreement. This message is confidential: if >> you have received it by mistake, please advise immediately the sender by >> e-mail and destroy the message and its attachments. You are hereby notified >> that any unauthorized use of the content of this message could constitute a >> criminal offence. Thank you.
> This e-mail message does not imply or cause any obligation, unless it is > provided by a previous written agreement. This message is confidential: if > you have received it by mistake, please advise immediately the sender by > e-mail and destroy the message and its attachments. You are hereby notified > that any unauthorized use of the content of this message could constitute a > criminal offence. Thank you.
> -- > You received this message because you are subscribed to the Google > Groups "APE Project" group. > To post to this group, send email to ape-project@googlegroups.com > To unsubscribe from this group, send email to > ape-project+unsubscribe@googlegroups.com > For more options, visit this group at > http://groups.google.com/group/ape-project?hl=en > --- > APE Project (Ajax Push Engine) > Official website : http://www.ape-project.org/ > Git Hub : http://github.com/APE-Project/
On Tuesday, April 3, 2012 7:52:08 PM UTC+8, Gino wrote:
> Hi,
> I'm currently wrapping up a project but I'm now required to use SSL > for my APE server. Everything has been working fine until I've > implemented SSL on my web server (IIS). > I followed the instructions in > http://www.ape-project.org/wiki/index.php/SSL_with_ape
> I installed stunnel4 version 4.29-1 > on the same server as my APE
> Stunnel starts with no errors but when I run the Check tool bundled in > ape-jsf (which is also updated to support the secure parameter) > I fail at contacting https://ape.my-domain:442
> When I check the stunnel logs I find the following:
> 2012.04.03 18:43:04 LOG3[2409:140692054951680]: SSL_accept: Peer > suddenly discon > nected > 2012.04.03 18:43:04 LOG5[2409:140692054951680]: Connection reset: 0 > bytes sent t > o SSL, 0 bytes sent to socket > 2012.04.03 18:43:04 LOG7[2409:140692054951680]: ape finished (0 left)
> I'm finding it difficult to find out what exactly is failing during > the test. > Could any one who successfully setup SSL with APE share their > experience? > Been going through the group but haven't been able to find anything. > Any help is greatly appreciated!
