You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by Fabricio Luiz Machado <so...@yahoo.com.br> on 2004/11/10 12:36:24 UTC
[users@httpd] PLEASE, HELP ME! - SSL Crashes
Hi,
My SSL site works fine, but sometimes, (once a week)
SSL (and 443 port) stops to answer requests.
So, I restart apache and everything works again...
##### My environment: I will do security updates tonight... :-)
- Slackware Linux 9.1
- apache-1.3.31
- php 4.3.8
- mod_ssl-2.8.19_1.3.31.
##### My httpd.conf:
<VirtualHost xxx.xxx.xxx.xxx:80>
ServerName service.domain.com
RewriteEngine On
RewriteCond %{HTTPS} !=on
RewriteRule ^/(.*) https://%{SERVER_NAME}/$1 [L,R,NC]
</VirtualHost>
##### My mod_ssl.conf:
<VirtualHost xxx.xxx.xxx.xxx:443>
ServerName service.domain.com
DocumentRoot "/var/www/htdocs/service/"
SSLEngine On
SSLCertificateFile /etc/apache/certs/service.crt
SSLCertificateKeyFile /etc/apache/certs/service.key
SetEnvIf User-Agent ".*MSIE.*" \
nokeepalive ssl-unclean-shutdown \
downgrade-1.0 force-response-1.0
CustomLog /var/log/apache/ssl_request_bcob_log \
"%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
ProxyPass /portalX http://localhost:81/portalX
ProxyPassReverse /portalX http://localhost:81/portalX
ProxyPass /portalY http://localhost:81/portalY
ProxyPassReverse /portalY http://localhost:81/portalY
</VirtualHost>
##### My ssl_engine_log:
[Tue Oct 19 18:39:37 2004] [error] mod_ssl: SSL handshake interrupted
by system [Hint: Stop button pressed in browser?!] (System error
follows)
[Tue Oct 19 18:39:37 2004] [error] System: Connection reset by peer
(errno: 104)
Any idea ?
It´s giving me insomnia ...
Thanks in advance,
Fabricio.
_______________________________________________________
Yahoo! Acesso Grátis - Internet rápida e grátis. Instale o discador agora! http://br.acesso.yahoo.com/
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] PLEASE, HELP ME! - SSL Crashes
Posted by Fabricio Luiz Machado <so...@yahoo.com.br>.
OK Joe,
I updated to the latest releases and I´ll wait...
I hope it works ...
Fabricio.
--- "JoeGerard@isdn7.net" <ad...@isdn7.net> escreveu:
> I have no clue !
>
> One thing to keep in mind is that if its a bug , then you dont
> have any choice but to upgrade to a newer version that
> the bug is fixed !
>
> No sence loosing sleep over something that is out
> of your control !
>
> Find someone that is really good at this to check your
> config and settings !
>
> If they are ok ?
>
> Report the bug and look for a workaround !
>
> A workaround is a change in config and/or settings
> that avoid the bug !
>
> What else can you do ?
>
> Fabricio Luiz Machado <so...@yahoo.com.br> wrote:
> Hi,
>
> My SSL site works fine, but sometimes, (once a week)
> SSL (and 443 port) stops to answer requests.
>
> So, I restart apache and everything works again...
>
>
> ##### My environment: I will do security updates tonight... :-)
>
> - Slackware Linux 9.1
> - apache-1.3.31
> - php 4.3.8
> - mod_ssl-2.8.19_1.3.31.
>
> ##### My httpd.conf:
>
>
> ServerName service.domain.com
> RewriteEngine On
> RewriteCond %{HTTPS} !=on
> RewriteRule ^/(.*) https://%{SERVER_NAME}/$1 [L,R,NC]
>
>
>
> ##### My mod_ssl.conf:
>
>
> ServerName service.domain.com
> DocumentRoot "/var/www/htdocs/service/"
> SSLEngine On
> SSLCertificateFile /etc/apache/certs/service.crt
> SSLCertificateKeyFile /etc/apache/certs/service.key
> SetEnvIf User-Agent ".*MSIE.*" \
> nokeepalive ssl-unclean-shutdown \
> downgrade-1.0 force-response-1.0
> CustomLog /var/log/apache/ssl_request_bcob_log \
> "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
>
> ProxyPass /portalX http://localhost:81/portalX
> ProxyPassReverse /portalX http://localhost:81/portalX
>
> ProxyPass /portalY http://localhost:81/portalY
> ProxyPassReverse /portalY http://localhost:81/portalY
>
>
>
> ##### My ssl_engine_log:
>
> [Tue Oct 19 18:39:37 2004] [error] mod_ssl: SSL handshake interrupted
> by system [Hint: Stop button pressed in browser?!] (System error
> follows)
> [Tue Oct 19 18:39:37 2004] [error] System: Connection reset by peer
> (errno: 104)
>
>
> Any idea ?
> It´s giving me insomnia ...
>
> Thanks in advance,
>
> Fabricio.
>
>
>
>
>
> _______________________________________________________
> Yahoo! Acesso Grátis - Internet rápida e grátis. Instale o discador
> agora! http://br.acesso.yahoo.com/
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server
> Project.
> See for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> " from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
>
>
> PS - Laugh and become unhinged !
>
> Visit The Stamp Collecting WebSite at : http://stamps.isdn7.net
>
> NOTICE TO RECIPIENT: IF YOU RECEIVED THIS E-MAIL IN ERROR, PLEASE
> NOTIFY THE SENDER IMMEDIATELY OF THE ERROR BY RETURN E-MAIL AND
> DELETE THE MESSAGE FROM YOUR SYSTEM.
>
>
>
>
>
>
>
>
>
>
>
>
>
_______________________________________________________
Yahoo! Acesso Grátis - Internet rápida e grátis. Instale o discador agora! http://br.acesso.yahoo.com/
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] PLEASE, HELP ME! - SSL Crashes
Posted by "JoeGerard@isdn7.net" <ad...@isdn7.net>.
I have no clue !
One thing to keep in mind is that if its a bug , then you dont
have any choice but to upgrade to a newer version that
the bug is fixed !
No sence loosing sleep over something that is out
of your control !
Find someone that is really good at this to check your
config and settings !
If they are ok ?
Report the bug and look for a workaround !
A workaround is a change in config and/or settings
that avoid the bug !
What else can you do ?
Fabricio Luiz Machado <so...@yahoo.com.br> wrote:
Hi,
My SSL site works fine, but sometimes, (once a week)
SSL (and 443 port) stops to answer requests.
So, I restart apache and everything works again...
##### My environment: I will do security updates tonight... :-)
- Slackware Linux 9.1
- apache-1.3.31
- php 4.3.8
- mod_ssl-2.8.19_1.3.31.
##### My httpd.conf:
ServerName service.domain.com
RewriteEngine On
RewriteCond %{HTTPS} !=on
RewriteRule ^/(.*) https://%{SERVER_NAME}/$1 [L,R,NC]
##### My mod_ssl.conf:
ServerName service.domain.com
DocumentRoot "/var/www/htdocs/service/"
SSLEngine On
SSLCertificateFile /etc/apache/certs/service.crt
SSLCertificateKeyFile /etc/apache/certs/service.key
SetEnvIf User-Agent ".*MSIE.*" \
nokeepalive ssl-unclean-shutdown \
downgrade-1.0 force-response-1.0
CustomLog /var/log/apache/ssl_request_bcob_log \
"%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
ProxyPass /portalX http://localhost:81/portalX
ProxyPassReverse /portalX http://localhost:81/portalX
ProxyPass /portalY http://localhost:81/portalY
ProxyPassReverse /portalY http://localhost:81/portalY
##### My ssl_engine_log:
[Tue Oct 19 18:39:37 2004] [error] mod_ssl: SSL handshake interrupted
by system [Hint: Stop button pressed in browser?!] (System error
follows)
[Tue Oct 19 18:39:37 2004] [error] System: Connection reset by peer
(errno: 104)
Any idea ?
It�s giving me insomnia ...
Thanks in advance,
Fabricio.
_______________________________________________________
Yahoo! Acesso Gr�tis - Internet r�pida e gr�tis. Instale o discador agora! http://br.acesso.yahoo.com/
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
PS - Laugh and become unhinged !
Visit The Stamp Collecting WebSite at : http://stamps.isdn7.net
NOTICE TO RECIPIENT: IF YOU RECEIVED THIS E-MAIL IN ERROR, PLEASE NOTIFY THE SENDER IMMEDIATELY OF THE ERROR BY RETURN E-MAIL AND DELETE THE MESSAGE FROM YOUR SYSTEM.