[users@httpd] Random SSL Problems

[John Nichel <jo...@kegworks.com>]

Hi List,

   I having an issue here on a newly setup webserver that I'm hoping you 
can help me with.  For some reason, when some of our customers click to 
go into the secure area of our site, they're getting the Plain Jane IE 
error page of "Page cannot be displayed".  When this happens, I get an 
error like this in the error log:

> [Thu May 31 09:29:10 2007] [error] mod_ssl: SSL handshake interrupted by system [Hint: Stop button pressed in browser?!] (System error follows)
> [Thu May 31 09:29:10 2007] [error] System: Connection reset by peer (errno: 104)

I found this error in numerous results doing Google searches, but none 
of them seem to be relevant to my issue.  There doesn't seem to be any 
rhyme or reason as to who or why.  We've had customers call after they 
experience the issue who were using browsers like IE 6 and IE 7, but 
we've also had success with other customers using those same browsers (I 
cannot reproduce the problem locally).  I cannot be sure of the exact 
percentage of errors, but looking at our order volume, it seems to be 
happening about 40% of the time.

The install is configured and compiled from source on a RHEL4 box:

Apache 1.3.37
mod_ssl 2.8.28
OpenSSL 0.9.8e

And these modules are loaded into Apache:

mod_pythonmod_perl, mod_php4, mod_ssl, mod_setenvif, mod_so, 
mod_unique_id, mod_log_forensic, mod_usertrack, mod_headers, 
mod_expires, mod_cern_meta, mod_proxy, mod_digest, mod_auth_dbm, 
mod_auth_anon, mod_auth, mod_access, mod_rewrite, mod_alias, 
mod_userdir, mod_speling, mod_actions, mod_imap, mod_asis, mod_cgi, 
mod_dir, mod_autoindex, mod_include, mod_info, mod_status, 
mod_negotiation, mod_mime, mod_mime_magic, mod_log_config, mod_define, 
mod_env, mod_vhost_alias, http_core

Any help would be greatly appreciated.

-- 
John C. Nichel IV
System Administrator
KegWorks
http://www.kegworks.com
716.362.9212 x16
john@kegworks.com

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: [users@httpd] Random SSL Problems

[Graeme Fowler <gr...@graemef.net>]

On Thu, 2007-05-31 at 09:59 -0400, John Nichel wrote:
> The install is configured and compiled from source on a RHEL4 box:
> 
> Apache 1.3.37
> mod_ssl 2.8.28
> OpenSSL 0.9.8e
<snip>

Try making sure that you have the redoubtable BrowserMatch lines for
MSIE:

BrowserMatch "MSIE 4\.0" nokeepalive downgrade-1.0 force-no-vary 
ssl-unclean-shutdown force-response-1.0
BrowserMatch "MSIE [5-6]" ssl-unclean-shutdown

Where you place them in your config will depend, but you'll need
mod_setenvif loaded (which I see you already have). That should fix most
of the problems you have, if not all - unless you already have those
config lines, of course!

HTH

Graeme


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org