SSL and handshake failure whren using Internet Site documents

HCL Domino Domino Forum
1

I have noticed on the console, and in the server logs, I am getting the following error messages.

10/30/2003 07:50:07 AM HTTP Server: SSL handshake failure, no website found for IP address [0.0.0.0]

or

10/30/2003 07:50:07 AM HTTP Server: SSL handshake failure, no website found for IP address [192.168.xxx.xxx], where the last two octects are my server’s address.

I have searched this forum and have not found anything that would correct this issue.

Is this a known bug?

2

Subject: SSL and handshake failure whren using Internet Site documents

The Lotus Software KnowledgeBase says the following:

Lotus Software Knowledge Base

Title:

	Error: "HTTP Server: SSL Handshake Failure..." with Error Code 4165

Product:

Platform(s): Lotus Domino > Lotus Domino Server > 6.0.2 CF2, 6.0.2 CF1, 6.0.1 CF3, 6.0.1 CF2, 6.0.1 CF1, 6.0.1, 6.0

	Platform Independent

Document Number: 1107534 Date: 10/08/2003

This document is based on the following :

About SPRs

SPR Number SPR Status SPR Fixed Release

WRAY5HVRUM Resolved/Fixed Lotus Domino Server 6.0.3

Problem

You set up SSL on your Domino 6 server. After that, you notice many SSL handshake error messages filling your Notes log. These error messages have a result code of 4165. The full error is as follows:

“HTTP Server: SSL handshake failure, IP address [10.0.0.1], Keyring [selfcert.kyr], [SSL Error: Network IO error], code [4165]”

This issue was reported to Lotus software Quality Engineering and has been addressed in Domino 6.0.3 and Domino 6.5.

Excerpt from the Lotus Notes and Domino Release 6.0.3 MR fix list (available at http://www.lotus.com/ldd):

SSL

SPR# WRAY5HVRUM - Only display messages about SSL handshake failures if session or thread logging is enabled.

The error message appears in the log when a Microsoft Internet Explorer 5.x or 6 browser connects using SSL; if you use a Netscape browser, the error does not occur. Domino reports this error due to a variation in the SSLv3 specification by certain Internet clients like Microsoft Internet Explorer. These clients send a FIN message in the middle of the SSL handshake. The Domino server reports this FIN message as a handshake error because the client does not follow the SSLv3 specification.