I have tried all of these suggestions before mailing this list Including
SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP SSLSessionCache shm:/var/log/httpd/ssl_gcache_data(151200) SSLSessionCacheTimeout 300 SSLMutex file:/var/log/httpd/ssl_mutex SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0 NONE seem to completely work... and it always seems to fail in the same place with the same error. And it fails with SSLv2 and SSLv3 ciphers. My guestimate is that 1 in about 530 connections fail due to this problem on my servers. And, I cannot find any apparent pattern as to why they fail. Simply that they always fail in the same location with the same error. Its almost as if the ssl-negotiation is timing out???? Any ideas how I could verify this? ----- Original Message ----- From: "Aaron Gee" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, December 18, 2001 11:11 AM Subject: RE: OpenSSL I/O error causing "Page cannot be displayed" in browser > > We tried that also. Below is a short list of the combinations and variations > we have tried > Notice some lines from the conf file do the same as others, just trying all > possibilities > the comments (#) in front are my addition. I have tried almost every > iteration of the following > to get SOMETHING to work. > > Tried all of the following. > > #SSLProtocol SSLv2 > #SSLProtocol all -SSLv3 > #SSLProtocol all > #SSLCipherSuite > ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL > #SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP > > Tried both of these: > > #SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown > #SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown > downgrade-1.0 force-response-1.0 > > Also tried these in various combinations with above: > > #SSLSessionCache none > #SSLSessionCache shmht:logs/ssl_scache(512000) > #SSLSessionCache shmcb:logs/ssl_scache(512000) > #SSLSessionCache shm:logs/ssl_scache(512000) > #SSLSessionCache shmht:logs/ssl_scache > #SSLSessionCache shmcb:logs/ssl_scache > #SSLSessionCache shm:logs/ssl_scache > #SSLSessionCacheTimeout 300 > #SSLMutex file:logs/ssl_mutex > > > AG > > > > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On > Behalf Of Bryan Field-Elliot > Sent: Tuesday, December 18, 2001 12:57 > To: [EMAIL PROTECTED] > Subject: RE: OpenSSL I/O error causing "Page cannot be displayed" in browser > > > Sorry you already gave up, but I believe the lines below should fix your > problem (in addition to the SetEnvIf line you already added): > > > SSLSessionCache dbm:/var/ssl_cache > SSLSessionCacheTimeout 300 > > (change the path in the first line to one which makes sense on your server) > > > > ______________________________________________________________________ > Apache Interface to OpenSSL (mod_ssl) www.modssl.org > User Support Mailing List [EMAIL PROTECTED] > Automated List Manager [EMAIL PROTECTED] ______________________________________________________________________ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
