Fwiw, I'm getting nearly identical symptoms as well. After an indeterminate amount of time, SSL requests to the server seem to hang indefinitely. The problem appears to temporarily clear itself for a short time.
IE seems to trigger it frequently, but another person here has seen it with Mozilla. We've been using shm for our session cache. Setting MaxRequestsPerChild to something low seems to have eased things significantly, but not resolved them entirely. Restarting the server clears the problem completely... for a little while. I've run with max SSL debugging and trussed the servers, but nothing useful was logged... but, then again, I'm not sure what I'd be looking for, and we can't trigger the symptoms at will. Details: solaris 2.8, apache 1.3.27, openssl 0.97a, mod_ssl-2.8.12-1.3.27 We've turned off keepalive and set ssl-unclean-shutdown for both MSIE and Mozilla, set downgrade-1.0 and forceresponse-1.0 for MSIE, and are running with the default SSLCipherSuite, except that Export56 is disabled. Thanks. -- jeff On Tue, Mar 04, 2003 at 04:03:32PM +0000, Mark Boddington wrote: > > Sorry I forgot to mention that I am also getting the following in the > ssl_engine log when IE disconnects: > > [04/Mar/2003 15:00:16 04121] [info] Connection to child 6 established > (server admin.netbanx.com:443, client 10.10.10.10) > [04/Mar/2003 15:00:16 04121] [info] Seeding PRNG with 1160 bytes of > entropy > [04/Mar/2003 15:00:16 04121] [info] Spurious SSL handshake > interrupt[Hint: Usually just one of those OpenSSL confusions!?] > > As you can see there are no errors apart from the handshake interrupt > caused by IE disconnecting from the server. > > I think this issue may be something to do with the SSLSessionCache. If I > connect to the server and restart IE multiple times I get the page cannot > be displayed error within a few minutes. I'm using dbm for my cache, I'll > try switching to shm to see if that improves the situation. > > Cheers, > > Mark > ______________________________________________________________________ > Apache Interface to OpenSSL (mod_ssl) www.modssl.org > User Support Mailing List [EMAIL PROTECTED] > Automated List Manager [EMAIL PROTECTED] ______________________________________________________________________ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
