Error: SSL_CTX_set_tlsext_servername_callback failed SSL

[Igor Sysoev]

On Sun, Aug 02, 2009 at 10:51:08AM +0200, nginxlist at serverphorums.com wrote:

> I'm trying to use SSL on Nginx and have run into the same problem.  I think this is the only thread on Google about this issue!!!
> 
> Alan, did you ever figure this one out?  Idk what to do.
> 
> 
> After uncommenting the *ssl* lines in my 
> /etc/nginx/sites-available/mainserver file, I am unable to restart Nginx 
> Executing sudo /etc/init.d/nginx restart produces this ERROR:
> 
> "Restarting nginx: 2008/10/14 11:25:22  7898#0: 
> SSL_CTX_set_tlsext_servername_callback() failed (SSL:)
> nginx."
> 
> I have searched with google and at the Nginx site, at the nginx wiki and 
> at the nginx email archives, and I could not find any clue about this error.
> 
> I am using Nginx 0.6.32 (nginx_0.6.32-3ubuntu1_i386.deb - Ubuntu 8.10) 
> in a Ubuntu 8.04 LTS server with libssl0.9.8.
> The certificates were created in /etc/nginx/ssl/ with:
> openssl req -new -x509 -nodes -out server.crt -keyout server.key
> 
> Did anybody had a similar problem?
> Do you have any clues on how to overcome this problem?

What do show

ldd /usr/sbin/nginx
ldd `which openssl`

?


> M.
> 
> 
> # start /etc/nginx/sites-available/mainserver
> #
> # (...)
> server {
> listen 443;
> server_name phpmyadmin;
> access_log  /var/log/nginx/phpmyadmin.access.log;
> error_log  /var/log/nginx/phpmyadmin.error.log;
> 
> ssl on;
> ssl_certificate /etc/nginx/ssl/cert.pem;
> ssl_certificate_key /etc/nginx/ssl/cert.key;
> #ssl_session_timeout  5m;
> #ssl_protocols  SSLv2 SSLv3 TLSv1;
> #ssl_ciphers  ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP;
> #ssl_prefer_server_ciphers   on;
> 
> 	location /phpmyadmin {
> 		root	/var/www/nginx-default;
> 		index	index.php;
> 	}
> 
> 	location ~ \.php$ {
> 		include /etc/nginx/fastcgi_params;
> 		fastcgi_pass 127.0.0.1:9000;
> 		fastcgi_index index.php;
> 		fastcgi_param SCRIPT_FILENAME 
> /var/www/nginx-default/phpmyadmin$fastcgi_script_name;
> 		#fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
> 	}
> }# end /etc/nginx/sites-available/mainserver
> 
> ---
> posted at http://www.serverphorums.com
> http://www.serverphorums.com/read.php?5,255,24427#msg-24427


-- 
Igor Sysoev
http://sysoev.ru/en/