You are viewing limited content. For full access, please sign in.

Question

Question

Internal SSL error [1366] when attempting to attach a repository from the client using SSL.

Laserfiche Version 9 Security
Updated September 17, 2014
asked on September 16, 2014

I'm trying to configure SSL between the LF Server and Client in a test environment, and I am running into this error message. The repository can be attached without SSL just fine. I am using test certificates that I generated myself using the makecert utility. Here are the steps I have taken so far:

 

1. Generated a Trusted Root CA (signing key) and a personal server CA (exchange key) signed by the trusted CA.

2. Followed the instructions here to configure the server:

https://support.laserfiche.com/ow.aspx?Laserfiche8.0/ConfiguringSSL

3. Imported the Root CA certificate to the client machine.

4. Attempted to connect to the LF Server with the "Use SSL" option checked.

 

I realize that the instructions are for LF 8.0, and I am using LF 9.1.1, but I couldn't find any newer source of information (even the LF 9.1 admin guide seems to have LESS up-to-date info than the dev notes article above, as it doesn't have anything about using netsh instead of httpcfg for windows 7). I should also mention that it's not a firewall issue because I have tried this with firewalls completely disabled to rule that out. Can anyone point me in the right direction? There seems to no information on this error code 1366.

Oh, and here are the details from the error message:

Error Code: 1366
Error Message: Internal SSL error. [1366]

------------ Technical Details: ------------

LFSO:
    Call Stack: (Exception)
        CLFServer::GetAllDatabases
    Additional Details:
        HRESULT: 0x80040556 (CLFServer::GetAllDatabases, LFServer.cpp:2799)
         (LFSO/9.1.1.546)
LF.exe (9.1.1.548):
    Call Stack: (Exception)
        CLoginDialog::AttemptLogin
        CLoginDialog::LoginToServer
        CLoginView::LoginHandler
    Call Stack: (Current)
        CLoginDialog::LoginToServer
        CLoginView::LoginHandler
    Additional Details:
        Exception: 0x80040556 [1366] (Internal SSL error.) (CLoginDialog::LoginToServer at LoginDialog.cpp:794)
    Call History:
        CLoginView::LoginHandler
         CLoginDialog::LoginToServer
          GetOptionString ([TestRepoSettings]AdminNoPassword)
          GetOptionString ([TestRepoSettings]UserName)
          GetOptionString ([Settings]UseWindowsAuth)
          GetOptionString ([TestRepoSettings]UseWindowsAuth)
          CLoginDialog::AttemptLogin
           GetOptionString ([Settings]CheckServerVersion)

0 0

Answer

SELECTED ANSWER
replied on September 16, 2014

Those instructions should work. Does the server address you put into the repository registration window match the CN(Common Name) of the certificate exactly?

1 0
replied on September 17, 2014

This was the issue alright. When I created a new server certificate using the domain name instead of the IP, it worked properly. Thanks.

0 0

Replies

replied on September 16, 2014

Thanks John, I think you pointed me in the right direction... It looks like I used a server IP address instead of a CN when I made the certificate. I'll regenerate some new certificates and try again later today. I'll let you know if that resolved the issue.

0 0
You are not allowed to follow up in this post.

Sign in to reply to this post.

Details
Related Posts
Loading ...