Re: [AOLSERVER] nssock: server ready - resuming

2004-01-20 Thread Andrew Piskorski
On Tue, Jan 20, 2004 at 11:47:54AM +0200, Yuval Lieberman wrote: [20/Jan/2004:01:28:58][5962.4101][-conn1-] Notice: nssock: server ready - resuming I counted 2793 appearences in a log of 6 days. I don't know that that really means, but it's coming from SockReady() in

Re: [AOLSERVER] nssock: server ready - resuming

2004-01-20 Thread Jim Wilcoxson
These messages mean that the server received a request, but there were no free connection threads to pass the request to, ie, all of your threads were busy. The naive solution is to increase MaxThreads, but this likely won't solve your problem. For example, if your machine is out of CPU, setting

[AOLSERVER] nsopenssl: sockclient: SERVER's CERT is NOT VALID message

2004-01-20 Thread Torben Brosten
Hi all, This SERVER's CERT is NOT VALID message appears in the error log whenever an ns_httpsget is used to contact a merchant gateway via ssl. Subsequently, the return from ns_httpsget fails. Could the failure be related even though peer-to-peer SSL does not require a recognized CA for this

Re: [AOLSERVER] nsopenssl: sockclient: SERVER's CERT is NOT VALID message

2004-01-20 Thread Scott Goodwin
Why are you using the same file for both your Certificates and your list of CA Certificates to validate incoming certificates with? When a client passes you their certificate, nsopenssl uses the CA certificates in the CAFile to validate that client certificate. Based on what I see below, you're

[AOLSERVER] aolserver 3.4.2 configuration questions

2004-01-20 Thread Dino Vliet
Dear all, I've installed aoserver 3.4.2 on my freebsd 4.9 laptop for developing and testing some web applications I'm planning to create. The installation went ok and I can serve static pages. However, when I try to feed my system some .tcl pages under pageroot I get the whole page as text and

Re: [AOLSERVER] aolserver 3.4.2 configuration questions

2004-01-20 Thread Mark Page
On the running .tcl pages part (there are others who can comment better on your postgres questions); Try looking at what shows up in the server log file. This file will either be flowing to standard-out, or to the configured 'serverlog' path (defaults to $homedir/log/server.log; you've specified

Re: [AOLSERVER] nsopenssl: sockclient: SERVER's CERT is NOT VALID message

2004-01-20 Thread Torben Brosten
Thanks, Scott. Why are you using the same file for both your Certificates and your list of CA Certificates to validate incoming certificates with? This variation of the configuration is the most recent, and most disparate (pun intended). =) I cannot find docs on how to configure the openssl

Re: [AOLSERVER] nsopenssl: sockclient: SERVER's CERT is NOT VALID message

2004-01-20 Thread Scott Goodwin
Use the CAFile param -- ignore the CADir param. Simply take all the CA certificates you have that you want to use to validate peer certificates with and concatenate them together into one file. The CA certificates have to be in PEM format. You only use them when you have PeerVerify set and you