Why is the Qualys SSL Labs a success but browsers get no response.

Started by [email protected], January 06, 2017, 02:55:55 AM

Previous topic - Next topic

[email protected]

Hello, I am trying to bring up an Apache Windows server.

For "https://localhost"   (Listen 443 https) Apache works perfectly.
For the Qualys SSL Labs "SSL Server Test" (Listen 192.168.2.14:443 https) Apache works perfectly.

The error.log shows the Apache version as:
AH00455: Apache/2.4.23 (Win64) OpenSSL/1.0.2j configured -- resuming normal operations
AH00456: Server built: Jul  1 2016 10:38:22
AH80000: Distributed by: The Apache Haus
AH80001: Compiled with: Visual Studio 2015

"The Open Port Check Tool - Test Port Forwarding on Your Router" shows the 443 port open.
http://www.yougetsignal.com/tools/open-ports/
Port 443 is open on 69.158.23.243.

A  Qualys SSL Labs test (https://www.ssllabs.com/ssltest/)  of  (realtimetest.mastercom.com) is successful.  The Apache "ssl_request.log" shows:
[04/Jan/2017:15:52:02 -0500] 64.41.200.102 TLSv1.2 ECDHE-RSA-AES256-SHA "GET / HTTP/1.0" 45490
[04/Jan/2017:15:52:08 -0500] 64.41.200.102 TLSv1 DHE-RSA-AES256-SHA "GET /?SSL_Labs_Renegotiation_Test=User_Agent_May_Not_Show HTTP/1.0" 226
[04/Jan/2017:15:52:18 -0500] 64.41.200.102 - - "GET /?SSL_Labs_Renegotiation_Test=User_Agent_May_Not_Show HTTP/1.0" 226

When I try https://realtimetest.mastercom.com, it says page not found when using the Windows IE or Edge or Goggle Chrome.  The error.log  and ssl_request.log has no entries for these tests.

An openssl  test  gives "No such file or directory" as shown below.
openssl s_client -connect realtimetest.mastercom.com:443
connect: No such file or directory
connect:errno=0

How does Qualys SSL Labs test gets through but not the browsers or the openssl test??
Thanks for any help.
Roger


Gregg

Works for me on IE


It probably has more to do with how your router deals with loopback since outside can contact the server and get the correct response if what you see in the image is the correct response.

[email protected]

Yes, that is the correct response. I have been beating my head against brick wall for days now!!! I had exhausted all my avenues but I sure know more about Apache and how it works. Thanks for such a quick reply.