title: Apache SSL3_ACCEPT:unsafe legacy renegotiation disabled
body: <p>One of our clients is complaining that they cannot access our ssl webserver. We are using Ubuntu 12.04, Apache 2.2.22 and our OpenSSL-version is 1.0.1. Apache error log is saying the following: </p>
  
  <pre><code>[error] [client xxx.xxx.xxx.xxx] Re-negotiation request failed
  [error] SSL Library Error: 336068946 error:14080152:SSL routines:SSL3_ACCEPT:unsafe legacy renegotiation disabled
  </code></pre>
  
  <p>According to Apache access log they are using very old browsers. I have read that adding "SSLVerifyClient optional" and "SSLInsecureRenegotiation on"-options will fix this problem. However, Apache error log is still giving us this error. </p>
  
  <pre><code>&lt;VirtualHost *:443&gt;
     SSLEngine on
     SSLProtocol all -SSLv2
     ....
     ....
     SSLVerifyClient optional
     SSLInsecureRenegotiation on
  &lt;/VirtualHost&gt;
  </code></pre>
  
  <p>Is there something wrong with our virtualhost configuration? Since our client won't fix this at their end, is there something else we could try besides this? </p>