The Apache Haus Forum

Forum Topics => Apache 2.4 => Topic started by: [email protected] on January 06, 2017, 02:55:55 AM

Title: Why is the Qualys SSL Labs a success but browsers get no response.
Post by: [email protected] on January 06, 2017, 02:55:55 AM
Hello, I am trying to bring up an Apache Windows server.

For "https://localhost"   (Listen 443 https) Apache works perfectly.
For the Qualys SSL Labs "SSL Server Test" (Listen 192.168.2.14:443 https) Apache works perfectly.

The error.log shows the Apache version as:
AH00455: Apache/2.4.23 (Win64) OpenSSL/1.0.2j configured -- resuming normal operations
AH00456: Server built: Jul  1 2016 10:38:22
AH80000: Distributed by: The Apache Haus
AH80001: Compiled with: Visual Studio 2015

"The Open Port Check Tool - Test Port Forwarding on Your Router" shows the 443 port open.
http://www.yougetsignal.com/tools/open-ports/
Port 443 is open on 69.158.23.243.

A  Qualys SSL Labs test (https://www.ssllabs.com/ssltest/)  of  (realtimetest.mastercom.com) is successful.  The Apache "ssl_request.log" shows:
[04/Jan/2017:15:52:02 -0500] 64.41.200.102 TLSv1.2 ECDHE-RSA-AES256-SHA "GET / HTTP/1.0" 45490
[04/Jan/2017:15:52:08 -0500] 64.41.200.102 TLSv1 DHE-RSA-AES256-SHA "GET /?SSL_Labs_Renegotiation_Test=User_Agent_May_Not_Show HTTP/1.0" 226
[04/Jan/2017:15:52:18 -0500] 64.41.200.102 - - "GET /?SSL_Labs_Renegotiation_Test=User_Agent_May_Not_Show HTTP/1.0" 226

When I try https://realtimetest.mastercom.com, it says page not found when using the Windows IE or Edge or Goggle Chrome.  The error.log  and ssl_request.log has no entries for these tests.

An openssl  test  gives "No such file or directory" as shown below.
openssl s_client -connect realtimetest.mastercom.com:443
connect: No such file or directory
connect:errno=0

How does Qualys SSL Labs test gets through but not the browsers or the openssl test??
Thanks for any help.
Roger

Title: Re: Why is the Qualys SSL Labs a success but browsers get no response.
Post by: Gregg on January 06, 2017, 03:38:05 AM
Works for me on IE
(https://s27.postimg.org/76oopc6wj/worksforme_sm.png?noredir=1)

It probably has more to do with how your router deals with loopback since outside can contact the server and get the correct response if what you see in the image is the correct response.
Title: Re: Why is the Qualys SSL Labs a success but browsers get no response.
Post by: [email protected] on January 06, 2017, 04:46:35 AM
Yes, that is the correct response. I have been beating my head against brick wall for days now!!! I had exhausted all my avenues but I sure know more about Apache and how it works. Thanks for such a quick reply.