Full_Name: Robert Monical
Version: 2.6.2-1.3.12
OS: Solaris Intel 2.7
Submission from: (NULL) (63.225.93.238)


Documentation (perhaps configuration) only report.

Recommended fix.
Add a comment in the reference guide for SSLSessionCache that enabling the cache
may address some browser client problems.
Perhaps add the same comment to the FAQ in the IE connection problem.

Problem
After moving our web site from an Apache 1.3.9 (do not have exact modssl/openssl
versions)
to Apache 1.3.11 openssl 0.9.4 and modssl 2.5.1-1.3.11, we started to receive
secure channel errors on some IE clients. In my testing, these problems seemed
to be version specific, but other users reported problems with versions of IE 5
that worked for me. They were running over slower connections.

Log file looks like
[14/Apr/2000 04:30:26 08396] [info]  Connection to child 4 established (server
harlem.gto.com:443, client 192.168.0.17)
[14/Apr/2000 04:30:26 08396] [info]  Seeding PRNG with 1160 bytes of entropy
[14/Apr/2000 04:30:27 08396] [info]  Spurious SSL handshake interrupt[Hint:
Usually just one of those OpenSSL confusions!?]

The fix was to change 
SSLSessionCache        none
to 
SSLSessionCache         dbm:/http/logs/ssl_scache

This problem was duplicated and fixed by this change in the following
configurations:
Solaris Intel 2.7
Apache 1.3.11
Openssl 0.9.4
Modssl 2.5.1-1.3.11
and
Solaris Intel 2.7
Apache 1.3.12
Openssl 0.9.5a
Modssl 2.6.2-1.3.12


______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to