IPv6 Error - SSL

Help
1

Hello all,

I have strange situation and I don’t know how to solve this problem.

When I installed SSL Letsencyprt everything looks fine till I testing on SSL labs.
Site grade is A (IPv4), but for IPv6 no result …

Then I’ve test server again and I got this :

(x:xxx::xxx:xxxx:xxxx:8539): TLS handshake error: error:1408F10B:SSL routines:ssl3_get_record:wrong version number

In mean while I am trying to do debug link in Facebook debugger and I got this error

Curl error: 35 (SSL_CONNECT_ERROR)

Then I’ve created in subdomain new site and get a SSL Letsencrypt from Virtualmin.
Evertyhing was fine. I’ve checked in Facebook debbuger link, and it passed.

I’ve check in SSL labs and everythings fine.

It seems that from some reason SSL not reading IPv6 , i am not sure, but I suppose.
I would appreciate any help or guidance how to solve this issues

Thanks

1 Like
2

Manually check the webserver config Virtualmin generated for you. Probably your virtual host is not tied to your IPv6 socket so the default one is used instead. For example, if you listen named host A on * and named host B on [your:IPv6], then opening A will actually open B as it has better specificity. Also, ensure AAAA DNS record is correct.

2 Likes
3

@milanleon
Without an FQDN it is impossible to help troubleshoot this problem with you.

I do agree with @SagePtr, in that one FQDN may work with IPv6 while another FQDN fails (on the same IP) because they likely aren't using the same Listen statements within their vhost configs.

4

Thanks for both of you @SagePtr @rg305

Honestly, I don’t remember and I have to admit from reason I had to do things very fast, because site had a lot of visitis.
When you mention that now I think I’ve made mistake exactly on that point.

When I do migrated from one IP address (VPS server) to another I forgot to delete domain A/AAAA records on hosting from that IP address.
While I was waiting for DNS propagation probably somethings happend on this two IP address in same time, because I had SSL on that IP address for this website.

But now I don’t know should I delete complete Virtual server and do things from beganing again or to delete SSL and strart again with request.

As I said before subdomain now woks well… Just I don’t know how to solve this for main domain…

Thank you for replays.

2 Likes
5

Thanks for replay @rg305 @SagePtr

Well... It is not related to SSL, DNS etc...
It is just one single click .... IPv6 was on OFF and I just turn ON ....in virtualmin

p.s. please don't kill me :slight_smile:

2 Likes
6

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.