Thanks for the info.<br>I checked the browser TLS is enabled.<br>Is there a special way to enable it on the server??<br><br><br>It is very strange for me because before Nginx i was using litespeed and there every SSL host was listening on 443 and everything worked..how do they do it i don`t know..??<br>
<br><br><br><div class="gmail_quote">2009/10/29 Igor Sysoev <span dir="ltr"><<a href="mailto:is@rambler-co.ru">is@rambler-co.ru</a>></span><br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<div class="im">On Wed, Oct 28, 2009 at 11:59:44PM +0200, Iantcho Vassilev wrote:<br>
<br>
> Here is the debug on the host when only one site listens to 443<br>
><br>
</div><div class="im">> 2009/10/29 00:55:11 [debug] 9171#0: *195388 http check ssl handshake<br>
> 2009/10/29 00:55:11 [debug] 9171#0: *195388 https ssl handshake: 0x16<br>
> 2009/10/29 00:55:11 [debug] 9171#0: *195388 SSL_do_handshake: -1<br>
> 2009/10/29 00:55:11 [debug] 9171#0: *195388 SSL_get_error: 2<br>
<br>
</div>SNI handshake looks like this:<br>
<br>
2009/10/29 09:53:05 [debug] 73997#0: *1 http check ssl handshake<br>
2009/10/29 09:53:05 [debug] 73997#0: *1 https ssl handshake: 0x16<br>
2009/10/29 09:53:05 [debug] 73997#0: *1 SSL server name: "<a href="http://www.example.com" target="_blank">www.example.com</a>"<br>
2009/10/29 09:53:05 [debug] 73997#0: *1 SSL_do_handshake: -1<br>
2009/10/29 09:53:05 [debug] 73997#0: *1 SSL_get_error: 2<br>
<div class="im"><br>
> 2009/10/29 00:55:11 [debug] 9171#0: *195388 post event 0000000001DD95A0<br>
> 2009/10/29 00:55:11 [debug] 9171#0: *195388 delete posted event<br>
> 0000000001DD95A0<br>
> 2009/10/29 00:55:11 [debug] 9171#0: *195388 SSL handshake handler: 0<br>
> 2009/10/29 00:55:11 [debug] 9171#0: *195388 SSL_do_handshake: 1<br>
> 2009/10/29 00:55:11 [debug] 9171#0: *195388 SSL: SSLv3, cipher:<br>
> "DHE-RSA-AES256-SHA SSLv3 Kx=DH Au=RSA Enc=AES(256) Mac=SHA1"<br>
<br>
</div>For some reason only SSLv3 has been negotiated.<br>
Either server has no enabled TLSv1 in ssl_protocols, or browser.<br>
<div><div></div><div class="h5"><br>
<br>
--<br>
Igor Sysoev<br>
<a href="http://sysoev.ru/en/" target="_blank">http://sysoev.ru/en/</a><br>
<br>
</div></div></blockquote></div><br>