Pedro,
If you add this script to the bottom of your config file, you can get a
substituted list of your config values:
set Debug 1
if {[info exists Debug] && $Debug} {
set sections [ns_configsections]
set output [list]
foreach section $sections {
set name [ns_set name $section]
set section_txt ""
append section_txt "ns_section $name\n"
set size [ns_set size $section]
for {set i 0} {$i < $size} {incr i} {
append section_txt "\t[list ns_param [ns_set key $section $i]
[n
s_set value $section $i]]\n"
}
lappend output $section_txt
}
set output "[join [lsort $output] "\n"]\n"
puts "\n$output\n"
}
For debugging configuration problems it will help you and us to figure out the
current settings.
(you can also run this as a tcl page by changing 'puts ' to 'ns_return 200
text/plain ')
tom jackson
On Friday 10 August 2007 09:46, Pedro Liska wrote:
> Hi,
>
> I'm using AOLserver 4.5.0 with nsopenssl v3_0beta26 . When I post a file
> that is greater than 10MB to the server, I get a "The connection was reset"
> error in Mozilla and a "Internet Explorer cannot display the webpage" error
> in IE7.
>
> My guess is that AOLserver is looking at the Content-Length of the request
> and immediately dropping the connection. The request is not even logged in
> the access.log .
>
> I believe I have the maxinput and recvwait parameters set correctly on the
> nssock and nsopenssl sections. I'm copy pasting these sections to the
> bottom of this email. I've gone nuts trying to figure this out. Please let
> me know if you see where I'm messing up. Let me know if you'd like to see
> more (or all) of my config sections.
>
> Thank you!
>
> -- Pedro
>
>
> ns_section "ns/server/$servername/module/nssock"
> ns_param timeout 120
> ns_param hostname $hostname
> ns_param address $address
> ns_param port $httpport
> ns_param maxinput [expr $max_file_upload_mb * 1024 * 1024]
> ;# Maximum File Size for uploads in bytes
> ns_param recvwait [expr $max_file_upload_mins *
> 60] ;# Maximum request time in minutes
>
> ns_section "ns/server/${servername}/module/nsopenssl"
>
> ns_param ServerPort $httpsport
> # pliska commented the line below because this is not the correct
> section
> # for it. (
> http://www.mail-archive.com/aolserver@listserv.aol.com/msg07365.html )
> # ns_param maxinput [expr $max_file_upload_mb * 1024 *
> 1024] ;# Maximum File Size for uploads in bytes
>
> ns_section "ns/server/${servername}/module/nsopenssl/sslcontexts"
> ns_param users "SSL context used for regular user access"
> # ns_param admins "SSL context used for administrator access"
> ns_param client "SSL context used for outgoing script socket
> connections"
>
> ns_section "ns/server/${servername}/module/nsopenssl/defaults"
> ns_param server users
> ns_param client client
>
> ns_section "ns/server/${servername}/module/nsopenssl/sslcontext/users"
> ns_param Role server
> #ns_param ModuleDir ${serverroot}/etc/certs
> ns_param CertFile server.crt
> ns_param KeyFile server.key
> # ns_param CADir ca-client/dir
> ns_param CAFile ca-client.crt
> # for Protocols "ALL" = "SSLv2, SSLv3, TLSv1"
> ns_param Protocols "SSLv3, TLSv1"
> ns_param CipherSuite
> "ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP"
> ns_param PeerVerify false
> ns_param PeerVerifyDepth 3
> ns_param Trace false
>
> # following from bartt's nsd4.tcl, might help stablize openssl
> connections?
> # http://www.mail-archive.com/aolserver@listserv.aol.com/msg07092.html
> ns_param SessionCache true
> ns_param SessionCacheID 1
> ns_param SessionCacheSize 512
> ns_param SessionCacheTimeout 300
>
>
> # ns_section
> "ns/server/${servername}/module/nsopenssl/sslcontext/admins"
> # ns_param Role server
> # ns_param ModuleDir /path/to/dir
> # ns_param CertFile server/server.crt
> # ns_param KeyFile server/server.key
> # ns_param CADir ca-client/dir
> # ns_param CAFile ca-client/ca-client.crt
> # # for Protocols "ALL" = "SSLv2, SSLv3, TLSv1"
> # ns_param Protocols "All"
> # ns_param CipherSuite
> "ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP"
> # ns_param PeerVerify false
> # ns_param PeerVerifyDepth 3
> # ns_param Trace false
>
> ns_section "ns/server/${servername}/module/nsopenssl/sslcontext/client"
> ns_param Role client
> #ns_param ModuleDir ${serverroot}/etc/certs
> ns_param CertFile server.crt
> ns_param KeyFile server.key
> # ns_param CADir ${serverroot}/etc/certs
> ns_param CAFile ca-client.crt
> # for Protocols "ALL" = "SSLv2, SSLv3, TLSv1"
> ns_param Protocols "SSLv2, SSLv3, TLSv1"
> ns_param CipherSuite
> "ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP"
> ns_param PeerVerify false
> ns_param PeerVerifyDepth 3
> ns_param Trace false
>
> # following from bartt's nsd4.tcl, might help stablize openssl
> connections?
> # http://www.mail-archive.com/aolserver@listserv.aol.com/msg07092.html
> ns_param SessionCache true
> ns_param SessionCacheID 1
> ns_param SessionCacheSize 512
> ns_param SessionCacheTimeout 300
>
> ns_section "ns/server/${servername}/module/nsopenssl/ssldrivers"
> ns_param users "Driver for regular user access"
> # ns_param admins "Driver for administrator access"
>
> ns_section "ns/server/${servername}/module/nsopenssl/ssldriver/users"
> ns_param sslcontext users
> ns_param port $httpsport
> ns_param hostname $hostname
> ns_param address $address
> # following added per
> # http://www.mail-archive.com/aolserver@listserv.aol.com/msg07365.html
> # Maximum File Size for uploads:
> ns_param maxinput [expr $max_file_upload_mb * 1024 * 1024]
> ;# in bytes (defaluts to 1MB)
> # Maximum request time
> ns_param recvwait [expr $max_file_upload_mins *
> 60] ;# in seconds (defaults to 30 seconds)
>
> # ns_section "ns/server/${servername}/module/nsopenssl/ssldriver/admins"
> # ns_param sslcontext admins
> # ns_param port $httpsport_admins
> # ns_param port $httpsport
> # ns_param hostname $hostname
> # ns_param address $address
>
>
> --
> AOLserver - http://www.aolserver.com/
>
> To Remove yourself from this list, simply send an email to
> <[EMAIL PROTECTED]> with the body of "SIGNOFF AOLSERVER" in the
> email message. You can leave the Subject: field of your email blank.
--
AOLserver - http://www.aolserver.com/
To Remove yourself from this list, simply send an email to <[EMAIL PROTECTED]>
with the
body of "SIGNOFF AOLSERVER" in the email message. You can leave the Subject:
field of your email blank.
