I'm trying to use the apache benchmark tool. Upon using the following command I get
xx@xx:/etc/apache2/bin$ ./ab -n 10 https://10.29.2.98/
This is ApacheBench, Version 2.3 <$Revision: 1879490 $>
Copyright 1996 Adam Twiss, Zeus Technology Ltd, http://www.zeustech.net/
Licensed to The Apache Software Foundation, http://www.apache.org/
Benchmarking 10.29.2.98 (be patient)...SSL handshake failed (1).
140483846321920:error:140943FC:SSL routines:ssl3_read_bytes:sslv3 alert bad record
mac:ssl/record/rec_layer_s3.c:1536:SSL alert number 20
SSL handshake failed (1).
140483846321920:error:140943FC:SSL routines:ssl3_read_bytes:sslv3 alert bad record mac:ssl/record/rec_layer_s3.c:1536:SSL alert number 20
SSL handshake failed (1).
.
.
In the httpd-ssl
configuration file, SSLCipherSuite & Protocol looks like the following,
xxx@xxx:/etc/apache2/conf/extra$ vi httpd-ssl.conf
SSLCipherSuite AES128-SHA256
SSLProtocol all -SSLv3
However, both from browser and curl I can see the https
working,
xxx@xxx:~$ curl -k https://10.29.2.98
<HTML>
<body>
Welcome!!
</body>
</html>
Again, If I force curl to use tls1.2, I get the following,
xxx@xxx:~$ curl -k https://10.29.2.98 --tlsv1.2 --tls-max 1.2
curl: (35) error:140943FC:SSL routines:ssl3_read_bytes:sslv3 alert bad record mac
Any help, what did I do wrong?
I have installed apache & OpenSSL from the source code.
Apache :2.4.46
OpenSSL : 1.1.1c