RE: [cobalt-security] adm_error logs - speaking HTTP to HTTPS port

["Mark Carey" <mark.carey@xxxxxxx>]

Hi guys,
  this is active monitor checking to see if your SSL enabled site is
functioning.  Note the time of the request:  it is on the 15 minute mark of
the hour.  The swatch program (system watch) runs every 15 minutes to check
the status of the services on the machine.  You should notice similar
entries for other services as well.  Check your /var/log/maillog or http log
files.  You should see the same thing every quarter hour.

	Hope this settles your fears,
	Mark.

-----Original Message-----
From: cobalt-security-admin@xxxxxxxxxxxxxxx
[mailto:cobalt-security-admin@xxxxxxxxxxxxxxx]On Behalf Of Jaana Jarve
Sent: Friday, June 28, 2002 4:49 AM
To: cobalt-security@xxxxxxxxxxxxxxx
Subject: Re: [cobalt-security] adm_error logs - speaking HTTP to HTTPS
port




On Thu, 27 Jun 2002, David Lucas wrote:

> At 07:42 PM 6/27/2002, you wrote:
>
> >This has been going on for some time now on my server. Can anyone help me
> >get it out of my adm_error log file. I have no clue where to start.
> >
> >
> >[Thu Jun 27 20:15:01 2002] [error] OpenSSL: error:1407609C:SSL
> >routines:SSL23_GET_CLIENT_HELLO:http request [Hint: speaking HTTP to
HTTPS
> >port!?]

just as the error says, you have an ssl-enabled site that someone is
trying to access over plain http.

rgds,
netcat

_______________________________________________
cobalt-security mailing list
cobalt-security@xxxxxxxxxxxxxxx
http://list.cobalt.com/mailman/listinfo/cobalt-security