> So you think I need to regenerate the self signed certificate? If you are using a self-signed cert then your browser needs an exception for it to be trusted, I might try a different browser to help understand where the problem is.
It could be how the browser handles Certificate Revocation List (CRL) and Online Certificate Status Protocol (OCSP) Ref: https://devcentral.f5.com/articles/security-sidebar-my-browser-has-no-idea-your-certificate-was-just-revoked-19963 For example, I recall some time ago, that one of the common optional blocklists (voipbl) used with AstLinux blocked a CRL server, this could explain a 20 sec. delay if the browser's network path went through such a blocklist. But, would a CRL/OCSP be used with a self-signed cert exception ? Possibly dependent on the browser. Please pass on any knowledge you gain on this. Lonnie > On Aug 9, 2018, at 11:28 PM, Michael Knill > <michael.kn...@ipcsolutions.com.au> wrote: > > It returned immediately. > So you think I need to regenerate the self signed certificate? > > Regards > Michael Knill > > On 10/8/18, 12:39 am, "Lonnie Abelbeck" <li...@lonnie.abelbeck.com> wrote: > > Hi Michael, > > If you ssh into the box, try > -- > time curl -Lk https://127.0.0.1 > -- > If this completes in much less than the 20 seconds you are seeing in a > browser, it could be related to the browser's certificate validation. > > If this also takes 20 seconds ... I'm stumped. > > Lonnie > > > >> On Aug 9, 2018, at 2:16 AM, Michael Knill >> <michael.kn...@ipcsolutions.com.au> wrote: >> >> Hi Michael >> >> This is not a new site, its an existing one. All the clean installs work >> fine. This was my last resort ☹ >> >> Regards >> Michael Knill >> >> On 9/8/18, 4:50 pm, "Michael Keuter" <li...@mksolutions.info> wrote: >> >> >>> Am 09.08.2018 um 01:29 schrieb Michael Knill >>> <michael.kn...@ipcsolutions.com.au>: >>> >>> Ok I did htop and it was basically nothing while I was waiting and then a >>> quick couple of percent when the page came up. >>> Its certainly not a resource or network issue. >>> Plenty of var space: >>> Filesystem Size Used Available Use% Mounted on >>> /dev/sda1 255.6M 97.6M 158.1M 38% /oldroot/cdrom >>> /dev/sda2 247.9M 50.8M 184.3M 22% /oldroot/mnt/asturw >>> /dev/sda3 27.0G 527.9M 25.1G 2% /mnt/kd >>> >>> Its certainly waiting for something. PS I also did an upgrade which didn't >>> fix it so it's not a corrupted binary etc. >>> >>> Regards >>> Michael Knill >> >> BTW: Have you tried it with a clean install image from our website? >> >>> On 9/8/18, 9:21 am, "Lonnie Abelbeck" <li...@lonnie.abelbeck.com> wrote: >>> >>> Try running "htop" via the CLI while you are trying to access the web >>> interface. >>> >>> If the htop usage stays reasonably low, then it most likely is a >>> network-ish issue. >>> >>> If you are traffic shaping, make sure it is not a typo too low. >>> >>> If HTTPS logs are enabled and you are out of /var/ space that could be an >>> issue. >>> >>> Lonnie >>> >>> >>> >>>> On Aug 8, 2018, at 5:53 PM, Michael Knill >>>> <michael.kn...@ipcsolutions.com.au> wrote: >>>> >>>> Nope it doesn't matter whether its local or remote SSH. >>>> Im quite certain its not a network problem. >>>> >>>> Regards >>>> Michael Knill >>>> >>>> On 9/8/18, 7:52 am, "Lonnie Abelbeck" <li...@lonnie.abelbeck.com> wrote: >>>> >>>> I have not seen such a thing. Does sound like a local network issue. >>>> >>>> Are you accessing it via a LAN device ? If so, (ex eth1) try "arp-scan -l >>>> -I eth1" to look for duplicate IP's. >>>> >>>> Are you using a numeric IP or DNS name ? Self-signed or ACME ? >>>> >>>> Lonnie >>>> >>>> >>>> >>>> >>>> >>>>> On Aug 8, 2018, at 4:43 PM, Michael Knill >>>>> <michael.kn...@ipcsolutions.com.au> wrote: >>>>> >>>>> No its every transaction on any page and I am talking 20 seconds here. >>>>> Its like its waiting for a DNS timeout or something but I couldn't see >>>>> anything with tcpdump? >>>>> >>>>> Regards >>>>> Michael Knill >>>>> >>>>> From: David Kerr <da...@kerr.net> >>>>> Reply-To: AstLinux List <astlinux-users@lists.sourceforge.net> >>>>> Date: Wednesday, 8 August 2018 at 10:54 pm >>>>> To: AstLinux List <astlinux-users@lists.sourceforge.net> >>>>> Subject: Re: [Astlinux-users] Astlinux Web GUI slow >>>>> >>>>> Every page or just one in particular? I have found that the status page >>>>> can be slow to display if you have enabled a lot of the sections. In >>>>> that case one of the culprits seems to be DNS lookups (e.g. to list hosts >>>>> for NTP time sources, etc.). Lonnie and I did some work recently to >>>>> speed up that page by "multi threading" some of the data gathering. >>>>> >>>>> David >>>>> >>>>> On Wed, Aug 8, 2018 at 6:55 AM, Michael Knill >>>>> <michael.kn...@ipcsolutions.com.au> wrote: >>>>>> Hi Group >>>>>> >>>>>> Im sure I have fixed this issue before but I cant remember what the >>>>>> problem was. Think I may document it this time. >>>>>> I have a site where the web GUI is very delayed e.g. it take a number of >>>>>> seconds for each page to come up. >>>>>> >>>>>> Any ideas where I should start troubleshooting? >>>>>> >>>>>> Regards >>>>>> Michael Knill ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot _______________________________________________ Astlinux-users mailing list Astlinux-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/astlinux-users Donations to support AstLinux are graciously accepted via PayPal to pay...@krisk.org.
