RE: IE discards pages once a while
This is a known problem. From the modssl FAQ: http://www.modssl.org/docs/2.8/ssl_faq.html#ToC49 Search the mailing list archives for MSIE, broken browser, for further points. The fix above works for everything except SSL file uploads. You can enable that on the client side by unchecking Tools-Internet Options-Show Friendly HTTP error pages, at least for IE 5.5. On the server side, it looks like file uploads aren't downgraded correctly per the fix if that option is enabled... --pete -Original Message- From: Henning Sittler [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 5:52 AM To: '[EMAIL PROTECTED]' Subject: RE: IE discards pages once a while I have older versions of apache and mod_ssl and I'm having the same problem... I thought I was going crazy. Everything works fine, and then all of a sudden I'll refresh a page or click a link and I get the same 'page not found' msg you are getting. For me this problem occurs about two or maybe three times per day, while the rest of the time my ssl vhost works just fine. Again, I have found no error msgs in any of my logs to indicate any problem related to this. I'm also trying to figure out how to upgrade my apache properly in the quickest way so my public server has as little downtime as possible. I thought that upgrading apache might fix the problem, but it looks like you are stuck in the same situation with a newer version. Have you tried any other browsers? I get this problem with different browsers on different OS's. So I suspect it's not the browser. Henning Sittler www.inscriber.com -Original Message- From: Peter Vinnemeier [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 3:24 AM To: [EMAIL PROTECTED] Subject: IE discards pages once a while Hi @ll, I have apache 1.3.22 with mod_ssl 2.8.5 and php 4.0.6 installed on RH7.1 with self signed certificates. When accessing the site it usually works fine, but once a while I get the IE error The page cannot be displayed, server or dns not found. The apache access and error logs do not show anything. When going back and pressing the same link again it works fine again. The problem occurs with IE5 and IE5.5 and it not really reproducable on cetrain actions. Does anybody have a clue? Thanks a lot in advance Peter __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager[EMAIL PROTECTED] __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager[EMAIL PROTECTED] __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager[EMAIL PROTECTED]
RE: IE discards pages once a while
Make that Tools-Internet Options-***Advanced***-Show friendly http error pages. sorry. --pete -Original Message- From: Peter Morelli Sent: Wednesday, October 31, 2001 9:21 AM To: '[EMAIL PROTECTED]' Subject: RE: IE discards pages once a while This is a known problem. From the modssl FAQ: http://www.modssl.org/docs/2.8/ssl_faq.html#ToC49 Search the mailing list archives for MSIE, broken browser, for further points. The fix above works for everything except SSL file uploads. You can enable that on the client side by unchecking Tools-Internet Options-Show Friendly HTTP error pages, at least for IE 5.5. On the server side, it looks like file uploads aren't downgraded correctly per the fix if that option is enabled... --pete -Original Message- From: Henning Sittler [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 5:52 AM To: '[EMAIL PROTECTED]' Subject: RE: IE discards pages once a while I have older versions of apache and mod_ssl and I'm having the same problem... I thought I was going crazy. Everything works fine, and then all of a sudden I'll refresh a page or click a link and I get the same 'page not found' msg you are getting. For me this problem occurs about two or maybe three times per day, while the rest of the time my ssl vhost works just fine. Again, I have found no error msgs in any of my logs to indicate any problem related to this. I'm also trying to figure out how to upgrade my apache properly in the quickest way so my public server has as little downtime as possible. I thought that upgrading apache might fix the problem, but it looks like you are stuck in the same situation with a newer version. Have you tried any other browsers? I get this problem with different browsers on different OS's. So I suspect it's not the browser. Henning Sittler www.inscriber.com -Original Message- From: Peter Vinnemeier [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 3:24 AM To: [EMAIL PROTECTED] Subject: IE discards pages once a while Hi @ll, I have apache 1.3.22 with mod_ssl 2.8.5 and php 4.0.6 installed on RH7.1 with self signed certificates. When accessing the site it usually works fine, but once a while I get the IE error The page cannot be displayed, server or dns not found. The apache access and error logs do not show anything. When going back and pressing the same link again it works fine again. The problem occurs with IE5 and IE5.5 and it not really reproducable on cetrain actions. Does anybody have a clue? Thanks a lot in advance Peter __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager[EMAIL PROTECTED] __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager[EMAIL PROTECTED] __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager[EMAIL PROTECTED] __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager[EMAIL PROTECTED]
RE: IE discards pages once a while
I have the SSLCipherSuite and SetEnvIf settings your describe, and it has completely stopped on my setup (solaris, apache 1.3.20, modssl 2.8.4), aside from the aforementioned file upload. If you search the mail archives, you'll find alternative settings, basically variations of these settings, that other people have had success with. From what I can remember(please check), some alternatives include replacing your SetEnvIf with the following lines: BrowserMatch MSIE [1-4] nokeepalive ssl-unclean-shutdown \ downgrade-1.0 force-response-1.0 BrowserMatch MSIE [5-9] ssl-unclean-shutdown This solves some Mac IE 5.0 problems, and lets 5.x browsers enjoy the benefits/speed of 1.1 keepalive... Also, make sure you have SSLSessionCache enabled. MSIE apparently doesn't like not having that. Again, I encourage you to do your own searching through the mailing list archives. There is a lot of good information there... http://marc.theaimsgroup.com/?l=apache-modssl --pete -Original Message- From: Glen S Mehn [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 10:08 AM To: [EMAIL PROTECTED] Subject: RE: IE discards pages once a while Pete: What if you have these options set: SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL and SetEnvIf User-Agent .*MSIE.* \ nokeepalive ssl-unclean-shutdown \ downgrade-1.0 force-response-1.0 and you've even tried SSLProtocol all -SSLv3 which minimize, but don't completely stop, the behaviour? Any ideas? (it still invariably occurs on IE5.x) glen -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Peter Morelli Sent: Wednesday, October 31, 2001 09:21 AM To: '[EMAIL PROTECTED]' Subject: RE: IE discards pages once a while This is a known problem. From the modssl FAQ: http://www.modssl.org/docs/2.8/ssl_faq.html#ToC49 Search the mailing list archives for MSIE, broken browser, for further points. The fix above works for everything except SSL file uploads. You can enable that on the client side by unchecking Tools-Internet Options-Show Friendly HTTP error pages, at least for IE 5.5. On the server side, it looks like file uploads aren't downgraded correctly per the fix if that option is enabled... --pete -Original Message- From: Henning Sittler [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 5:52 AM To: '[EMAIL PROTECTED]' Subject: RE: IE discards pages once a while I have older versions of apache and mod_ssl and I'm having the same problem... I thought I was going crazy. Everything works fine, and then all of a sudden I'll refresh a page or click a link and I get the same 'page not found' msg you are getting. For me this problem occurs about two or maybe three times per day, while the rest of the time my ssl vhost works just fine. Again, I have found no error msgs in any of my logs to indicate any problem related to this. I'm also trying to figure out how to upgrade my apache properly in the quickest way so my public server has as little downtime as possible. I thought that upgrading apache might fix the problem, but it looks like you are stuck in the same situation with a newer version. Have you tried any other browsers? I get this problem with different browsers on different OS's. So I suspect it's not the browser. Henning Sittler www.inscriber.com -Original Message- From: Peter Vinnemeier [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 3:24 AM To: [EMAIL PROTECTED] Subject: IE discards pages once a while Hi @ll, I have apache 1.3.22 with mod_ssl 2.8.5 and php 4.0.6 installed on RH7.1 with self signed certificates. When accessing the site it usually works fine, but once a while I get the IE error The page cannot be displayed, server or dns not found. The apache access and error logs do not show anything. When going back and pressing the same link again it works fine again. The problem occurs with IE5 and IE5.5 and it not really reproducable on cetrain actions. Does anybody have a clue? Thanks a lot in advance Peter __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager[EMAIL PROTECTED] __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager[EMAIL PROTECTED] __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager[EMAIL PROTECTED] __ Apache Interface
RE: MSIE POST problem
Yes, using the dmb version... --pete -Original Message- From: David Rees [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 24, 2001 6:55 PM To: '[EMAIL PROTECTED]' Subject: Re: MSIE POST problem On Wed, Oct 24, 2001 at 05:38:40PM -0700, Peter Morelli wrote: Sorry, I have the same situation after using those config lines. I had seen them on the mailing list before, but just to be sure I've just retested them. No change. Same symptoms and solutions... And you do have a ssl session cache defined? -Dave __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager[EMAIL PROTECTED] __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager[EMAIL PROTECTED]
RE: MSIE POST problem
I changed to shm from dbm, but it doesn't seem to solve my problem. The thing I don't understand is why unselecting show friendly http error pages somehow lets the form post be downgraded. Does apache use some sort of redirect header to downgrade the request, and MSIE interprets that header as an error? --peter -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Thursday, October 25, 2001 9:08 AM To: [EMAIL PROTECTED] Subject: RE: MSIE POST problem try the shm version, eg: SSLSessionCacheshm:/var/run/ssl_scache(512000) Seems to work better for everyone. - John Airey Internet systems support officer, ITCSD, Royal National Institute for the Blind, Bakewell Road, Peterborough PE2 6XU, Tel.: +44 (0) 1733 375299 Fax: +44 (0) 1733 370848 [EMAIL PROTECTED] -Original Message- From: Peter Morelli [mailto:[EMAIL PROTECTED]] Sent: 25 October 2001 16:37 To: '[EMAIL PROTECTED]' Subject: RE: MSIE POST problem Yes, using the dbm version... --pete -Original Message- From: David Rees [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 24, 2001 6:55 PM To: '[EMAIL PROTECTED]' Subject: Re: MSIE POST problem On Wed, Oct 24, 2001 at 05:38:40PM -0700, Peter Morelli wrote: Sorry, I have the same situation after using those config lines. I had seen them on the mailing list before, but just to be sure I've just retested them. No change. Same symptoms and solutions... And you do have a ssl session cache defined? -Dave __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager[EMAIL PROTECTED]
MSIE POST problem
I'm having quite a perplexing problem, and I was hoping someone could give me a hint here on this list. First, my environment: - Solaris 2.6 - Apache 1.3.20 - modssl 2.8.4 - openssl 0.9.6b - Weblogic 5.1 - MSIE 5.5 sp1 I'm using apache to frontend WebLogic through a BEA provided module. My problem: It seems similar to some of the archived posts on this list as well as a section of the FAQ, as it is the Server not found error from MSIE. I start out with a form retrieved over regular HTTP, and post a file upload to a HTTPS URL. However, even after enabling the various fixes (SetEnvIf to downgrade, etc) detailed in the FAQ and past posts, it still doesn't work. I invariably get a server not found page. However, if I go to IE's Tools-Internet Options-Advanced and uncheck Show friendly HTTP error messages, everything seems to work fine. Very weird. The error posts never even show up in my apache or weblogic logs, though after I turned the modssl log up to debug I can see some activity, and snoop picks up the packets between machines. Some other variables: - I use self generated certificates, which generate an accept certificate box in IE when it does work - Non-standard ports: 8110 for http, 8115 for https, in a Virtual hosts. The SetEnvIf downgrade is out in the main server config. - When I do standard form posts (just fields) this problem rarely crops up, if ever. - From the modssl debug logs, it looks like the multi-part form request (file upload) establishes a regular ssl connection, which closes with a standard shutdown, while a regular post does downgrade and uses an unclean shutdown... I have tried MANY different configurations, and I can't seem to get it to work. Any help would be greatly appreciated, as I'd rather not go back to serving http with weblogic (which doesn't seem to have a problem with IE). --peter __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager[EMAIL PROTECTED]
RE: MSIE POST problem
I've done a little more testing, and it seems like turning OFF the Show friendly http error pages option in MSIE allows apache/mod_ssl to downgrade the connection to HTTP/1.0 correctly. Turning it back on again leads to a situation where it is NOT downgraded, and you get the server not found page. Again, this is only for file uploads. --pete -Original Message- From: Peter Morelli Sent: Wednesday, October 24, 2001 11:59 AM To: '[EMAIL PROTECTED]' Subject: MSIE POST problem I'm having quite a perplexing problem, and I was hoping someone could give me a hint here on this list. First, my environment: - Solaris 2.6 - Apache 1.3.20 - modssl 2.8.4 - openssl 0.9.6b - Weblogic 5.1 - MSIE 5.5 sp1 I'm using apache to frontend WebLogic through a BEA provided module. My problem: It seems similar to some of the archived posts on this list as well as a section of the FAQ, as it is the Server not found error from MSIE. I start out with a form retrieved over regular HTTP, and post a file upload to a HTTPS URL. However, even after enabling the various fixes (SetEnvIf to downgrade, etc) detailed in the FAQ and past posts, it still doesn't work. I invariably get a server not found page. However, if I go to IE's Tools-Internet Options-Advanced and uncheck Show friendly HTTP error messages, everything seems to work fine. Very weird. The error posts never even show up in my apache or weblogic logs, though after I turned the modssl log up to debug I can see some activity, and snoop picks up the packets between machines. Some other variables: - I use self generated certificates, which generate an accept certificate box in IE when it does work - Non-standard ports: 8110 for http, 8115 for https, in a Virtual hosts. The SetEnvIf downgrade is out in the main server config. - When I do standard form posts (just fields) this problem rarely crops up, if ever. - From the modssl debug logs, it looks like the multi-part form request (file upload) establishes a regular ssl connection, which closes with a standard shutdown, while a regular post does downgrade and uses an unclean shutdown... I have tried MANY different configurations, and I can't seem to get it to work. Any help would be greatly appreciated, as I'd rather not go back to serving http with weblogic (which doesn't seem to have a problem with IE). --peter __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager[EMAIL PROTECTED] __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager[EMAIL PROTECTED]
RE: MSIE POST problem
Sorry, I have the same situation after using those config lines. I had seen them on the mailing list before, but just to be sure I've just retested them. No change. Same symptoms and solutions... --pete -Original Message- From: David Rees [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 24, 2001 5:03 PM To: '[EMAIL PROTECTED]' Subject: Re: MSIE POST problem On Wed, Oct 24, 2001 at 03:47:11PM -0700, Peter Morelli wrote: I've done a little more testing, and it seems like turning OFF the Show friendly http error pages option in MSIE allows apache/mod_ssl to downgrade the connection to HTTP/1.0 correctly. Turning it back on again leads to a situation where it is NOT downgraded, and you get the server not found page. Again, this is only for file uploads. It seems that recent versions (5.x+) of MSIE don't like being downgrade to HTTP/1.0. Try this config in place of your current SetEnvIf or BrowserMatch directive: BrowserMatch MSIE [1-4] nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0 BrowserMatch MSIE [5-9] ssl-unclean-shutdown You may be able to get away without having the second line entirely, but I haven't tested it myself. Let us know how it works out. -Dave __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager[EMAIL PROTECTED] __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager[EMAIL PROTECTED]
RE: Modssl on Openbsd 2.9
Those don't look like errors, just notices, or informational events. The first one is apache shutting down, looks like from a kill command. The second is Apache starting up again. No idea on the third. I get the first to all the time in my error_log... --pete -Original Message- From: Doug Dalton [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 24, 2001 5:41 PM To: [EMAIL PROTECTED] Subject: Modssl on Openbsd 2.9 Any idea why this error is occuring? [Wed Oct 24 15:45:29 2001] [notice] caught SIGTERM, shutting down [Wed Oct 24 15:47:12 2001] [notice] Apache/1.3.22 (Unix) mod_ssl/2.8.5 OpenSSL /0.9.6b configured -- resuming normal operations [Wed Oct 24 15:47:12 2001] [notice] Accept mutex: flock (Default: flock) __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager[EMAIL PROTECTED] __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager[EMAIL PROTECTED]
