Subject: How to log errors

From: Tim Fowle <[email-masked]>
Date: Wed, 05 Mar 2003 14:09:02 +0000

I have had a look in the archives but couldnt find definate answers to the following:

Im running a website that has ssl working quite happily for some time. However when errors occur it would be useful to get more details out to diagnose the errors better. For example, i use client authentication for part of the site. A few times a day i will get an error like the following:

[Tue Mar  4 13:16:22 2003] [error] mod_ssl: SSL handshake failed (server xxx.xxx.xxx:443, client 198.137.241.11) (OpenSSL library error follows)
[Tue Mar  4 13:16:22 2003] [error] OpenSSL: error:14094412:SSL routines:SSL3_READ_BYTES:sslv3 alert bad certificate [Hint: Subject CN in certificate not server name or identical to CA!?]

Is it possible (and if so how) to log the details from this certificate without having to change the logging level of mod_ssl?
I could change the level but i would end up with faaar to big logs.
Is it possible to add something to the end of the LogFormat line?

Secondly is it normal to get quite a few of the following:
[Tue Mar  4 13:45:09 2003] [error] mod_ssl: SSL handshake interrupted by system [Hint: Stop button pressed in browser?!] (System error follows)
[Tue Mar  4 13:45:09 2003] [error] System: Connection reset by peer (errno: 104)

Thanks for any help
Tim Fowle

______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [email-masked]
Automated List Manager                            [email-masked]