CONNECT timeouts with NS and IE

["M.G." <gl...@beer.net>]

I have built Apache 2.0.35 from source and am attempting to use it to
proxy requests from our internal network to the Internet.  The httpd
config is minimal -- just enough to get the proxy stuff working.

HTTP requests work beautifully, but HTTPS requests from Netscape and
IE just hang as if the browser and proxy are both waiting for data.
Eventually the connection seems to time out and an error is returned
in the browser.

The interesting part is that HTTPS requests from lynx via the same
proxy work fine.  I used ethereal to watch the connections in both
browser cases and provided some cleaned up output below to hopefully
provide a clue.

Netscape 4.x HTTPS request:
CONNECT www.ambientminds.com:443 HTTP/1.0
User-Agent: Mozilla/4.78 [en] (X11; U; Linux 2.4.17 i686; Nav)

Apache responds:
HTTP/1.0 200 Connection Established

At this point, running netstat on the proxy machine shows the
connection to the remote server is open as well as the incoming
connection from the browser, but nothing ever happens.  The connection
just sits there until ambientminds.com times out and closes it.

Lynx HTTPS request:
CONNECT www.ambientminds.com:443 HTTP/1.0
Host: www.ambientminds.com
Accept: text/html, text/plain, audio/x-pn-realaudio, audio/x-aiff,
application/postscript, video/mpeg, video/x-mpeg2, audio/x-mpeg,
audio/x-wav, audio/basic, video/x-msvideo, video/quicktime,
application/fractals, image/ief, image/png, image/x-photo-cd
Accept: image/x-ms-bmp, image/x-rgb, image/x-portable-pixmap,
image/x-portable-graymap, image/x-portable-bitmap,
image/x-portable-anymap, image/x-xwindowdump, image/x-xpixmap,
image/x-cmu-raster, image/tiff, audio/mpeg, application/pdf,
audio/x-wav
Accept: audio/x-voc, audio/mpeg, application/x-troff-man,
application/postscript, application/ghostview, application/pdf,
message/partial, message/external-body, application/x-debian-package,
audio/basic, application/x-669, application/x-alm
Accept: application/x-amd, application/x-far, application/x-mod,
application/x-mtm, application/x-okt, application/x-ptm,
application/x-rad, application/x-s3m, application/x-stm,
application/x-wow, application/x-xm, audio/mpeg, audio/x-pn-realaudio
Accept: audio/vnd.rn-realaudio, application/smil, audio/x-pn-mp3,
audio/wav, audio/x-wav, audio/au, audio/basic, audio/mpeg,
audio/x-mpeg, audio/x-aiff, audio/basic, audio/x-aiff, audio/x-gsm,
audio/x-wav, application/x-tar, application/x-gtar
Accept: image/gif, image/jpeg, video/dl, video/fli, video/mpeg,
video/quicktime, video/x-msvideo, video/x-sgi-movie, audio/basic,
audio/x-wav, application/xrx, audio/mpeg, audio/mpegurl,
audio/x-scpls, audio/x-wav, text/richtext, text/enriched
Accept: image/gif, image/jpeg, image/tiff, image/postscript,
image/x-portable-bitmap, image/x-portable-graymap,
image/x-portable-pixmap, image/x-xbitmap, image/x-xpixmap, image/bmp,
image/cmu-raster, image/x-rgb, image/targa, image/fits, image/png
Accept: image/pm, text/*, text/*, application/pdf, application/msword,
application/msword, */*, image/gif, image/jpeg, image/pjpeg,
image/png, image/x-xbitmap, image/x-xbm, image/xbm, text/mdl,
application/x-gtar, application/x-debian-package
Accept: text/sgml, video/mpeg, application/postscript, */*;q=0.01
Accept-Encoding: gzip, compress
Accept-Language: en
User-Agent: Lynx/2.8.3rel.1 libwww-FM/2.14 SSL-MM/1.4.1 OpenSSL/0.9.4

Apache responds:
HTTP/1.0 200 Connection Established

At this point I am assuming lynx begins the SSL negotiation because
the data in the TCP packets becomes hard to read.  The correct
response is returned to the browser, and I see the test page appear
just fine.

What gives?

mg


-- 
Michael Glasgow <gl...@beer.net> | "The people never give up their
PGP Fingerprint: 7D CD 24 D2 94 0F | liberties but under some delusion."
     66 F0 8A 8A 39 8D B4 11 89 AE |                --Edmund Burke, 1784

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org