Hash: SHA1
Joe Auty wrote:
> [Wed May 30 11:32:09 2007] [info] (70014)End of file found: SSL
> handshake interrupted by system [Hint: Stop button pressed in browser?!]
This is the message that caused the rest. As the error text implies, it can
be caused by someone stopping the SSL exchange before it was completed. If
you're seeing it multiple times in your logs it could mean any number of
things. A worm/exploit in the wild may not handle SSL well, a worm/exploit
in the wild may be trying to exploit mod_ssl, someones client doesn't play
nice with your SSL implementation, etc, etc. Possible reasons go on and on.
The message alone doesn't indicate a problem on your side. I wouldn't worry
about it unless you see other services also generating error.
- -Dave
- --
| Dave Monnier - dmonnier@ren-isac.net |
|
http://nicholas.ren-isac.net/dmonnier/
|
| Principal Security Engineer, REN-ISAC http://www.ren-isac.net/ |
| 24x7 Watch Desk: +1(317)278-6630, ren-isac@ren-isac.net |
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
iD8DBQFGXZ4BBIf6jlONJjIRAqXiAKCy8M2BX9bQ4Q67GiXwOUqTP1z09QCgy95t
zwOM8293h8LAAqlHpFfHe9s=
=+Hai
-----END PGP SIGNATURE-----
_______________________________________________
BLUG mailing list
BLUG@linuxfan.com
http://mailman.cs.indiana.edu/mailman/listinfo/blug
No comments:
Post a Comment