> to the ApacheModuleSSL.dll file on Windows NT), it reduced the
intermittent
> "Cannot find server or DNS error" and "Page cannot be displayed" messages
> received when using the IE browser.  I never received these errors when
> using the Netscape browser.

I'd be interested to know if the mod-ssl config change solves this because I
read a Nov 2001 article in Computer Technology Review that says, and I
quote:

"Internet Explorer sometimes drops SSL sessions after very short time
outs -- resulting in lost SSL connections for users.  To compensate for
this, the load balancer portion of the integrated device should be able to
decrypt the user cookie, make the correct traffic management decision, and
send the request to the right server.  Through this process, Internet
Explorer can renegotiate the SSL session ID as many times as it likes -- and
the user still ends up in the right place.  This is especially useful for
long-lived sessions (e.g. financial applications), since the cookie lives on
hte user system and does not consume memory on the load balancer."

What is all means, I'm still not sure.  I, too, have seen sessions get lost,
often very soon after establishing a session, resulting not in your error,
but in a relogin scenario, as if the actual 'session cookie' itself was
somehow getting lost in the SSL negotiation described (yes, I know the SSL
session id is distinct from the cookie session id for maintain web server
user sessions).

David

______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to