Ralf S. Engelschall wrote:
>
>
> Perhaps your <VirtualHost> which has the "SSLEngine on" is not applied at
all.
> For instance because it doesn't match your Listen directives. Because such
> hangs usually mean one connects via HTTP to a HTTPS port or vice versa.
No. But I have tried some more things. As I said before, it works
sometimes. This eliminates the possibility of a misconfiguration (at
least ist should :-)).
And it's the same configuration, that worked perfectly with openssl0.9.2
+ modssl2.2.8.
It seems to be a problem with the dbm-session-cache. I just made a
"hope-it-will-help-you-to-find-the-problem" session.
I stopped apache, erased /var/log/httpd_error_log and
/var/log/httpd_ssl_engine_log and then started apache.
Then I waited a minute (this does matter).
Then I connected to apache with the openssl-client:
openssl s_client -connect pyros:443 -debug
I instantly got a *working* connection (taht meand I got the
server-certificate and a *lot* of debug data). I entered my http-Request
("GET / HTTP/1.0") and got the reply (along with a lot of debug-data).
I immediately executed the same openssl-command, but this time apache
hanged. I just get a few debug-bytes (see the attached file
"typescript") and then nothing happend.
If you look into httpd_error_log, you will notice the problem with the
session-cache. And I think "Hier liegt der Hund begraben" (english: this
seems to be the problem).
The session cache exists but has wrong access rights:
-rw------- 2 root root 12288 Jul 13 14:47
/var/run/httpd_ssl_scache.dir
-rw------- 2 root root 12288 Jul 13 14:47
/var/run/httpd_ssl_scache.pag
Apache (or mod_ssl) somehow forgot to chown to httpd.root (apache ist
running as user "httpd").
When I delete these files and restart they are created with the correct
access-rights (owner httpd.root; mode 0600). But somehow they become
root.root.
I will send httpd_ssl_engine_log to rse only, because it's 36k
(SSLLogLevel was "debug").
[Message truncated]
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
