Hi,
I am running a Apache 2.2.3-16.18 on a SUSE ES-10-SP2.
Everything was fine till the time. But all of the sudden https
connection is taking too much time,
approximately 30 seconds, which is too much for the client.
I have not done any changes to the apache configuration.
Everything was working fine.
When i checked the mailing list i got to know that changing the
SSLRandomSeed from /dev/random to /dev/urandom will help.
But my ssl.conf says,
SSLRandomSeed startup builtin
SSLRandomSeed connect builtin
Now what does this mean. Will it be still using /dev/random to get the seed.
If this parameter is making the https slow, why all of the sudden it happen.
Please can you help me out of this problem.
For Reference :
~~~~~~~~~~~~~~~
SUSE Enterprise Server 10 SP2
Apache 2.2.3-16.18
PHP 5.2.6
openssl-0.9.8a-18.26
When i do a tcpdump i get this,
#######################
TCP Dump Out Put :::
#######################
19:32:51.302794 IP 61.95.200.164.49323 > 72.20.111.200.443: S
1937083897:1937083897(0) win 5840 <mss 1460,sackOK,timestamp 333274101
0,nop,wscale 2>
19:32:51.302852 IP 72.20.111.200.443 > 61.95.200.164.49323: S
2039907506:2039907506(0) ack 1937083898 win 5792 <mss
1460,sackOK,timestamp 8006333 333274101,nop,wscale 2>
19:32:51.609433 IP 61.95.200.164.49323 > 72.20.111.200.443: . ack 1 win
1460 <nop,nop,timestamp 333274178 8006333>
19:32:51.620882 IP 61.95.200.164.49323 > 72.20.111.200.443: P 1:127(126)
ack 1 win 1460 <nop,nop,timestamp 333274180 8006333>
19:32:51.620900 IP 72.20.111.200.443 > 61.95.200.164.49323: . ack 127
win 1448 <nop,nop,timestamp 8006412 333274180>
19:32:51.624731 IP 72.20.111.200.443 > 61.95.200.164.49323: .
1:1449(1448) ack 127 win 1448 <nop,nop,timestamp 8006413 333274180>
19:32:51.624735 IP 72.20.111.200.443 > 61.95.200.164.49323: P
1449:2587(1138) ack 127 win 1448 <nop,nop,timestamp 8006413 333274180>
19:32:51.933582 IP 61.95.200.164.49323 > 72.20.111.200.443: . ack 1449
win 2184 <nop,nop,timestamp 333274259 8006413>
19:32:51.934249 IP 61.95.200.164.49323 > 72.20.111.200.443: . ack 2587
win 2908 <nop,nop,timestamp 333274259 8006413>
19:32:51.955928 IP 61.95.200.164.49323 > 72.20.111.200.443: P
127:325(198) ack 2587 win 2908 <nop,nop,timestamp 333274264 8006413>
19:32:51.958202 IP 72.20.111.200.443 > 61.95.200.164.49323: P
2587:2646(59) ack 325 win 1716 <nop,nop,timestamp 8006496 333274264>
19:32:52.266436 IP 61.95.200.164.49323 > 72.20.111.200.443: P
325:522(197) ack 2646 win 2908 <nop,nop,timestamp 333274342 8006496>
19:32:52.302656 IP 72.20.111.200.443 > 61.95.200.164.49323: . ack 522
win 1984 <nop,nop,timestamp 8006583 333274342>
Waits here for 25 second
19:33:17.323689 IP 72.20.111.200.443 > 61.95.200.164.49323: .
2646:4094(1448) ack 522 win 1984 <nop,nop,timestamp 8012838 333274342>
19:33:17.323701 IP 72.20.111.200.443 > 61.95.200.164.49323: .
4094:6990(2896) ack 522 win 1984 <nop,nop,timestamp 8012838 333274342>
19:33:17.634421 IP 61.95.200.164.49323 > 72.20.111.200.443: . ack 5542
win 4356 <nop,nop,timestamp 333280684 8012838>
19:33:17.634436 IP 72.20.111.200.443 > 61.95.200.164.49323: .
6990:8438(1448) ack 522 win 1984 <nop,nop,timestamp 8012915 333280684>
19:33:17.634441 IP 72.20.111.200.443 > 61.95.200.164.49323: P
8438:9440(1002) ack 522 win 1984 <nop,nop,timestamp 8012915 333280684>
19:33:17.674408 IP 61.95.200.164.49323 > 72.20.111.200.443: . ack 6990
win 5080 <nop,nop,timestamp 333280694 8012838>
19:33:17.943246 IP 61.95.200.164.49323 > 72.20.111.200.443: . ack 8438
win 5804 <nop,nop,timestamp 333280761 8012915>
19:33:17.944356 IP 61.95.200.164.49323 > 72.20.111.200.443: . ack 9440
win 6528 <nop,nop,timestamp 333280761 8012915>
19:33:17.945572 IP 61.95.200.164.49323 > 72.20.111.200.443: P
522:559(37) ack 9440 win 6528 <nop,nop,timestamp 333280761 8012915>
19:33:17.945581 IP 72.20.111.200.443 > 61.95.200.164.49323: . ack 559
win 1984 <nop,nop,timestamp 8012993 333280761>
19:33:17.945645 IP 72.20.111.200.443 > 61.95.200.164.49323: P
9440:9477(37) ack 559 win 1984 <nop,nop,timestamp 8012993 333280761>
19:33:17.945705 IP 72.20.111.200.443 > 61.95.200.164.49323: F
9477:9477(0) ack 559 win 1984 <nop,nop,timestamp 8012993 333280761>
19:33:17.947649 IP 61.95.200.164.49323 > 72.20.111.200.443: F 559:559(0)
ack 9440 win 6528 <nop,nop,timestamp 333280762 8012915>
19:33:17.947659 IP 72.20.111.200.443 > 61.95.200.164.49323: . ack 560
win 1984 <nop,nop,timestamp 8012994 333280762>
19:33:18.257810 IP 61.95.200.164.49323 > 72.20.111.200.443: R
1937084456:1937084456(0) win 0
19:33:18.258578 IP 61.95.200.164.49323 > 72.20.111.200.443: R
1937084456:1937084456(0) win 0
19:33:18.259525 IP 61.95.200.164.49323 > 72.20.111.200.443: R
1937084457:1937084457(0) win 0
Thanks for your Attention,
Regards,
Ashok Raja R
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
" from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org
