Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I get this error every time I have a request to my SSL server, even when it's a text file. Is it not sending the response via SSL?

Apache SSL config:

Listen 443

AddType application/x-x509-ca-cert .crt
AddType application/x-pkcs7-crl    .crl

SSLPassPhraseDialog  builtin

SSLSessionCacheTimeout  300

SSLMutex default

<VirtualHost _default_:443>

DocumentRoot "C:/Websites/"
ErrorLog "C:/error.log"
TransferLog "C:/access.log"
Redirect permanent /bftq5/index.cfm
Redirect permanent /index.cfm
Redirect permanent /undefined

SSLEngine on


SSLCertificateFile "C:/ww6_xivio_com.crt"
SSLCertificateKeyFile "C:/myserver.key"

<FilesMatch "\.(cgi|shtml|phtml|php)$">
    SSLOptions +StdEnvVars
<Directory "C:/Program Files (x86)/Apache Software Foundation/Apache2.2/cgi-bin">
    SSLOptions +StdEnvVars

BrowserMatch ".*MSIE.*" \
         nokeepalive ssl-unclean-shutdown \
         downgrade-1.0 force-response-1.0

CustomLog "C:/Program Files (x86)/Apache Software Foundation/Apache2.2/logs/ssl_request.log" \
          "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"


You can see my robots.txt file has this error.

share|improve this question
up vote 2 down vote accepted

If your error is in a browser then this usually means that a resource or asset on the SSL page is being loaded up using HTTP rather than HTTPS. This can be an image, a third party counter widget or anything. If you check your images are relative links (../images/image1.jpg) and not absolute ( that's usually a good starting point.

Even with a text file the quickest way to debug this might be to View Source of the page throwing up the error in your browser and see what's actually being sent to the browser.

share|improve this answer
View source just shows the contents of the text file, I'm trying to read a text file just to show that there are no external resources being loaded but that text file. – James T Apr 15 '11 at 13:10
That's a good way of eliminating a few things. I'd go back the additions you made to the default Apache SSL config file 'diff -y oldile newfile' to compare what might cause it. – Jonathan Ross Apr 15 '11 at 13:12

It looks like your SSLCertificateKeyFile entry is missing from your configuration. It's also possible that your certificate was signed with an intermediate certificate that you may also need to include with a SSLCertificateChainFile directive.

share|improve this answer
It's there, I just missed putting it in when I removed all the comments to make it shorter. – James T Apr 15 '11 at 13:11
OK. The site name is Connecting to it with openssl indicates that the peer certificate is not trusted. Did your CA provide an Intermediate certificate or two to go along with the certificate you purchased? – mahnsc Apr 15 '11 at 13:43
It's, try – James T Apr 15 '11 at 14:48
There's another question, how can I make it not freak out when you go to the https www instead of https ww6? Can I have it redirect? Also, I found out that it is working with the robots txt, it's just that once you are in chrome and you have a non-htttps, it never has a check mark on that tab again. – James T Apr 15 '11 at 14:52
If you purchased a cert with multiple SAN entries and one of them is, then you're all set. But if the cert was only purchased for common name "", you're kind of stuck until you replace the cert. You'd also need to alias to in your dns. – mahnsc Apr 15 '11 at 20:59

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.