OpenSSL: error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol

0
votes

Standing up a web server, got the error code in the subject when I tried sudo wget -v https://192.168.0.2 but I get my index.html if I do sudo wget -v http://192.168.0.2:443 Every thread I have read says that it's because HTTP is listening on 443 and blocking SSL from using it and I confirmed that with sudo openssl s_client -connect 192.168.0.2:443 -debug

Using CentOS 7

EDIT #1: tried to post configs, but Ctrl+K isn't formatting my code. Ask for specific lines of a config file, will post in a comment.

  1. /etc/hosts
  2. /etc/httpd/conf/httpd.conf
  3. /etc/httpd/conf.d/ssl.conf
  4. /etc/httpd/conf.d/non-ssl.conf
  5. /etc/httpd/sites-available/mysite.conf

Tried these threads already:

If I missed a thread, please let me know, and I'll try anything.

1
apachessl
"Every thread I have read says that it's because HTTP is listening on 443"- which is very likely the case. This means that the configuration is wrong and you need to provide all the config files instead of only describing what they do in your opinion. – Steffen Ullrich
"unknown protocol" means the remote end does not speak TLS at all. Start with httpd -S that should really show you the VirtualHost defined. – Patrick Mevzek

1 Answers

1
votes

@Patrick-Mevzek gave a useful troubleshooting tool. httpd -S pointed to the config file that was causing the problems. I changed the port from 443 to 80 in my /etc/httpd/conf.d/mysite.conf file (a file I forgot about), and everything worked fine (minus the SSL problems, but I'm working through that). Thanks to Patrick!