Re: Failed uploading file to Appache HTTP Server after using SSL
Hi, Cliff, The below is the error in ssl-error_log when I am trying to save a large image: [Thu Apr 20 16:55:36 2006] [debug] ssl_engine_io.c(1523): OpenSSL: I/O error, 5 bytes expected to read on BIO#81f94a8 [mem: 81f9640] [Thu Apr 20 16:55:36 2006] [info] (70007)The timeout specified has expired: SSL input filter read failed. [Thu Apr 20 16:55:36 2006] [debug] ssl_engine_kernel.c(1794): OpenSSL: Write: SSL negotiation finished successfully [Thu Apr 20 16:55:36 2006] [info] Connection to child 4 closed with standard shutdown(server 192.168.2.130:443, client 192.168.2.199) [Thu Apr 20 16:55:36 2006] [debug] ssl_engine_io.c(1523): OpenSSL: I/O error, 5 bytes expected to read on BIO#81df970 [mem: 81eaf30] [Thu Apr 20 16:55:36 2006] [info] (70007)The timeout specified has expired: SSL input filter read failed. [Thu Apr 20 16:55:36 2006] [debug] ssl_engine_kernel.c(1794): OpenSSL: Write: SSL negotiation finished successfully [Thu Apr 20 16:55:36 2006] [info] Connection to child 7 closed with standard shutdown(server 192.168.2.130:443, client 192.168.2.199) Ken On 4/19/06, Cliff Woolley [EMAIL PROTECTED] wrote: On 4/19/06, Ken Chen [EMAIL PROTECTED] wrote: Now seems when uploading big file has problem in ssl. When I upload a 3K image file, it's ok. But when I upload a 35K image file. It failed. Ah, I see. Is there any place to set the cache/buffer? Or I have to set SSLSessionCache and SSLSessionCacheTimeout? You should set the session cache anyway (failing to do so will result in a major drop in performance), but this should have no effect on the particular problem you're describing. By the way, I don't understand why to use openssl s_client and issue a GET request? I am uploading file. Isn't it a POST request? Can you have a brief sample how to test? It was unclear to me from your original message that *any* https was working, so I was trying to just give you the most basic test to try. I didn't realize you could upload small files successfully. Did you turn on the ssl debug log and look at the spot in the large file upload where it failed? --Cliff -- -- Ken Chen __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List modssl-users@modssl.org Automated List Manager[EMAIL PROTECTED]
Re: Failed uploading file to Appache HTTP Server after using SSL
On 4/20/06, Ken Chen [EMAIL PROTECTED] wrote: [Thu Apr 20 17:04:46 2006] [debug] ssl_engine_io.c(1523): OpenSSL: I/Oerror, 5 bytes expected to read on BIO#81d53d8 [mem: 81eeef8]Just like it sounds from the message, this error occurs when the call to SSL_read() in ssl_io_input_read() fails with the system returning an error of ETIMEUP. While of course it's possible that something is getting stuck somewhere and thus it is taking a really long time and subsequently times out, my first inclination is to say that your global Timeout value is simply set too low. See http://httpd.apache.org/docs/2.0/mod/core.html#timeoutWhat value do you have set there?
Re: Failed uploading file to Appache HTTP Server after using SSL
Cliff: It's been set as the default one: 300. I wonder how many I need to set, say possibly my application has the functionality of uploading attachment, max 2.5MB. I have tried to search everywhere for solution for the same problem (ssl_engine_io.c OpenSSL: I/O error). I surprisingly found that many people have ever encountered this (page can't be displayed) too, although mostly in IE 5. But it claims to set the session cache, KeepAlive, etc. FYI, I surprisingly found that sometimes, it's find after I clearing my IE's cache before connecting to app, maybe it's really related to the network speed and timeout setting? Anyway, thank you very much for your detail, kindly and prompt reply. I should try tomorrow when backing to work. =) Ken On 4/20/06, Cliff Woolley [EMAIL PROTECTED] wrote: On 4/20/06, Ken Chen [EMAIL PROTECTED] wrote: [Thu Apr 20 17:04:46 2006] [debug] ssl_engine_io.c(1523): OpenSSL: I/O error, 5 bytes expected to read on BIO#81d53d8 [mem: 81eeef8] Just like it sounds from the message, this error occurs when the call to SSL_read() in ssl_io_input_read() fails with the system returning an error of ETIMEUP. While of course it's possible that something is getting stuck somewhere and thus it is taking a really long time and subsequently times out, my first inclination is to say that your global Timeout value is simply set too low. See http://httpd.apache.org/docs/2.0/mod/core.html#timeout What value do you have set there? -- -- Ken Chen __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List modssl-users@modssl.org Automated List Manager[EMAIL PROTECTED]
Re: Failed uploading file to Appache HTTP Server after using SSL
Cliff, I have reset the timeout to 600, but the problem remains. I wonder whether it's the timeout problem because the problem appears immediately after presssing Upload! Sometimes the problem is Page can't be displayed; sometimes it is what I mentioned at the very beginning that file can't been uploaded. I found that the error I attached: [Thu Apr 20 17:00:54 2006] [debug] ssl_engine_io.c(1523): OpenSSL: I/O error, 5 bytes expected to read on BIO#81d9850 [mem: 81e6f20] [Thu Apr 20 17:00:54 2006] [info] (70007)The timeout specified has expired: SSL input filter read failed. IS logging everywhere from times to times in the ssl-error_log even the page for loading is loaded successfully. The strangest thing is sometimes nothing is logged in error log when uploading file. It just display Page can't be displayed. Seems ssl has done nothing. If really have to come down to recompile in maintainer mode and attache a debugger, would you please kindly advice and describe the brief guides on how to do this? I am not familiar with it. Thanks. Ken On 4/21/06, Cliff Woolley [EMAIL PROTECTED] wrote: On 4/20/06, Ken Chen [EMAIL PROTECTED] wrote: Anyway, thank you very much for your detail, kindly and prompt reply. I should try tomorrow when backing to work. =) Let me know what other details you find out. It might come down to having to recompile apache in maintainer mode and attach a debugger to figure out what's going on... -- -- Ken Chen __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List modssl-users@modssl.org Automated List Manager[EMAIL PROTECTED]
