Hi,
I'm using AOLserver 4.5.0 with nsopenssl v3_0beta26 . When I post a file
that is greater than 10MB to the server, I get a "The connection was reset"
error in Mozilla and a "Internet Explorer cannot display the webpage" error
in IE7.
My guess is that AOLserver is looking at the Content-Length of the request
and immediately dropping the connection. The request is not even logged in
the access.log .
I believe I have the maxinput and recvwait parameters set correctly on the
nssock and nsopenssl sections. I'm copy pasting these sections to the bottom
of this email. I've gone nuts trying to figure this out. Please let me know
if you see where I'm messing up. Let me know if you'd like to see more (or
all) of my config sections.
Thank you!
-- Pedro
ns_section "ns/server/$servername/module/nssock"
ns_param timeout 120
ns_param hostname $hostname
ns_param address $address
ns_param port $httpport
ns_param maxinput [expr $max_file_upload_mb * 1024 * 1024]
;# Maximum File Size for uploads in bytes
ns_param recvwait [expr $max_file_upload_mins *
60] ;# Maximum request time in minutes
ns_section "ns/server/${servername}/module/nsopenssl"
ns_param ServerPort $httpsport
# pliska commented the line below because this is not the correct
section
# for it. (
http://www.mail-archive.com/[email protected]/msg07365.html )
# ns_param maxinput [expr $max_file_upload_mb * 1024 * 1024]
;# Maximum File Size for uploads in bytes
ns_section "ns/server/${servername}/module/nsopenssl/sslcontexts"
ns_param users "SSL context used for regular user access"
# ns_param admins "SSL context used for administrator access"
ns_param client "SSL context used for outgoing script socket
connections"
ns_section "ns/server/${servername}/module/nsopenssl/defaults"
ns_param server users
ns_param client client
ns_section "ns/server/${servername}/module/nsopenssl/sslcontext/users"
ns_param Role server
#ns_param ModuleDir ${serverroot}/etc/certs
ns_param CertFile server.crt
ns_param KeyFile server.key
# ns_param CADir ca-client/dir
ns_param CAFile ca-client.crt
# for Protocols "ALL" = "SSLv2, SSLv3, TLSv1"
ns_param Protocols "SSLv3, TLSv1"
ns_param CipherSuite
"ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP"
ns_param PeerVerify false
ns_param PeerVerifyDepth 3
ns_param Trace false
# following from bartt's nsd4.tcl, might help stablize openssl
connections?
# http://www.mail-archive.com/[email protected]/msg07092.html
ns_param SessionCache true
ns_param SessionCacheID 1
ns_param SessionCacheSize 512
ns_param SessionCacheTimeout 300
# ns_section
"ns/server/${servername}/module/nsopenssl/sslcontext/admins"
# ns_param Role server
# ns_param ModuleDir /path/to/dir
# ns_param CertFile server/server.crt
# ns_param KeyFile server/server.key
# ns_param CADir ca-client/dir
# ns_param CAFile ca-client/ca-client.crt
# # for Protocols "ALL" = "SSLv2, SSLv3, TLSv1"
# ns_param Protocols "All"
# ns_param CipherSuite
"ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP"
# ns_param PeerVerify false
# ns_param PeerVerifyDepth 3
# ns_param Trace false
ns_section "ns/server/${servername}/module/nsopenssl/sslcontext/client"
ns_param Role client
#ns_param ModuleDir ${serverroot}/etc/certs
ns_param CertFile server.crt
ns_param KeyFile server.key
# ns_param CADir ${serverroot}/etc/certs
ns_param CAFile ca-client.crt
# for Protocols "ALL" = "SSLv2, SSLv3, TLSv1"
ns_param Protocols "SSLv2, SSLv3, TLSv1"
ns_param CipherSuite
"ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP"
ns_param PeerVerify false
ns_param PeerVerifyDepth 3
ns_param Trace false
# following from bartt's nsd4.tcl, might help stablize openssl
connections?
# http://www.mail-archive.com/[email protected]/msg07092.html
ns_param SessionCache true
ns_param SessionCacheID 1
ns_param SessionCacheSize 512
ns_param SessionCacheTimeout 300
ns_section "ns/server/${servername}/module/nsopenssl/ssldrivers"
ns_param users "Driver for regular user access"
# ns_param admins "Driver for administrator access"
ns_section "ns/server/${servername}/module/nsopenssl/ssldriver/users"
ns_param sslcontext users
ns_param port $httpsport
ns_param hostname $hostname
ns_param address $address
# following added per
# http://www.mail-archive.com/[email protected]/msg07365.html
# Maximum File Size for uploads:
ns_param maxinput [expr $max_file_upload_mb * 1024 * 1024]
;# in bytes (defaluts to 1MB)
# Maximum request time
ns_param recvwait [expr $max_file_upload_mins *
60] ;# in seconds (defaults to 30 seconds)
# ns_section "ns/server/${servername}/module/nsopenssl/ssldriver/admins"
# ns_param sslcontext admins
# ns_param port $httpsport_admins
# ns_param port $httpsport
# ns_param hostname $hostname
# ns_param address $address
--
AOLserver - http://www.aolserver.com/
To Remove yourself from this list, simply send an email to <[EMAIL PROTECTED]>
with the
body of "SIGNOFF AOLSERVER" in the email message. You can leave the Subject:
field of your email blank.
