Ashok Raja R schrieb:
I am running a Apache 2.2.3-16.18 on a SUSE ES-10-SP2.
Everything was fine till the time. But all of the sudden https
connection is taking too much time, approximately 30 seconds,
which is too much for the client.
Do you see the requests made over HTTPS appear in the access log?
I have not done any changes to the apache configuration.
Everything was working fine.
Is it possible that someone else has made a change to your machine
configuration? For instance, a change to some firewall configuration?
SSLRandomSeed startup builtin
SSLRandomSeed connect builtin
Now what does this mean. Will it be still using /dev/random to get the
seed.
Neither /dev/random nor /dev/urandom, but, well, a builtin source.
http://httpd.apache.org/docs/2.2/mod/mod_ssl.html#sslrandomseed
If this parameter is making the https slow, why all of the sudden it
happen.
What evidence is there that SSLRandomSeed is indeed the culprit?
TCP Dump Out Put :::
#######################
19:32:51.302794 IP 61.95.200.164.49323 > 72.20.111.200.443: S
1937083897:1937083897(0) win 5840 <mss 1460,sackOK,timestamp 333274101
0,nop,wscale 2>
19:32:51.302852 IP 72.20.111.200.443 > 61.95.200.164.49323: S
2039907506:2039907506(0) ack 1937083898 win 5792 <mss
1460,sackOK,timestamp 8006333 333274101,nop,wscale 2>
This looks like something is accepting connections here.
[...]
325:522(197) ack 2646 win 2908 <nop,nop,timestamp 333274342 8006496>
19:32:52.302656 IP 72.20.111.200.443 > 61.95.200.164.49323: . ack 522
win 1984 <nop,nop,timestamp 8006583 333274342>
Waits here for 25 second
19:33:17.323689 IP 72.20.111.200.443 > 61.95.200.164.49323: .
2646:4094(1448) ack 522 win 1984 <nop,nop,timestamp 8012838 333274342>
Sorry, no idea. What's going on in that precise instant?
Michael Ludwig
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
" from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org
