Grrr it works fine in Chrome but not with Firefox!
Why would it only be this Astlinux box that this happens?
Regards
Michael Knill
On 10/8/18, 11:02 pm, "Lonnie Abelbeck" <li...@lonnie.abelbeck.com> wrote:
> So you think I need to regenerate the self signed certificate?
If you are using a self-signed cert then your browser needs an exception
for it to be trusted, I might try a different browser to help understand where
the problem is.
It could be how the browser handles Certificate Revocation List (CRL) and
Online Certificate Status Protocol (OCSP)
Ref:
https://devcentral.f5.com/articles/security-sidebar-my-browser-has-no-idea-your-certificate-was-just-revoked-19963
For example, I recall some time ago, that one of the common optional
blocklists (voipbl) used with AstLinux blocked a CRL server, this could explain
a 20 sec. delay if the browser's network path went through such a blocklist.
But, would a CRL/OCSP be used with a self-signed cert exception ? Possibly
dependent on the browser.
Please pass on any knowledge you gain on this.
Lonnie
> On Aug 9, 2018, at 11:28 PM, Michael Knill
<michael.kn...@ipcsolutions.com.au> wrote:
>
> It returned immediately.
> So you think I need to regenerate the self signed certificate?
>
> Regards
> Michael Knill
>
> On 10/8/18, 12:39 am, "Lonnie Abelbeck" <li...@lonnie.abelbeck.com> wrote:
>
> Hi Michael,
>
> If you ssh into the box, try
> --
> time curl -Lk https://127.0.0.1
> --
> If this completes in much less than the 20 seconds you are seeing in a
browser, it could be related to the browser's certificate validation.
>
> If this also takes 20 seconds ... I'm stumped.
>
> Lonnie
>
>
>
>> On Aug 9, 2018, at 2:16 AM, Michael Knill
<michael.kn...@ipcsolutions.com.au> wrote:
>>
>> Hi Michael
>>
>> This is not a new site, its an existing one. All the clean installs work
fine. This was my last resort ☹
>>
>> Regards
>> Michael Knill
>>
>> On 9/8/18, 4:50 pm, "Michael Keuter" <li...@mksolutions.info> wrote:
>>
>>
>>> Am 09.08.2018 um 01:29 schrieb Michael Knill
<michael.kn...@ipcsolutions.com.au>:
>>>
>>> Ok I did htop and it was basically nothing while I was waiting and then
a quick couple of percent when the page came up.
>>> Its certainly not a resource or network issue.
>>> Plenty of var space:
>>> Filesystem Size Used Available Use% Mounted on
>>> /dev/sda1 255.6M 97.6M 158.1M 38% /oldroot/cdrom
>>> /dev/sda2 247.9M 50.8M 184.3M 22%
/oldroot/mnt/asturw
>>> /dev/sda3 27.0G 527.9M 25.1G 2% /mnt/kd
>>>
>>> Its certainly waiting for something. PS I also did an upgrade which
didn't fix it so it's not a corrupted binary etc.
>>>
>>> Regards
>>> Michael Knill
>>
>> BTW: Have you tried it with a clean install image from our website?
>>
>>> On 9/8/18, 9:21 am, "Lonnie Abelbeck" <li...@lonnie.abelbeck.com> wrote:
>>>
>>> Try running "htop" via the CLI while you are trying to access the web
interface.
>>>
>>> If the htop usage stays reasonably low, then it most likely is a
network-ish issue.
>>>
>>> If you are traffic shaping, make sure it is not a typo too low.
>>>
>>> If HTTPS logs are enabled and you are out of /var/ space that could be
an issue.
>>>
>>> Lonnie
>>>
>>>
>>>
>>>> On Aug 8, 2018, at 5:53 PM, Michael Knill
<michael.kn...@ipcsolutions.com.au> wrote:
>>>>
>>>> Nope it doesn't matter whether its local or remote SSH.
>>>> Im quite certain its not a network problem.
>>>>
>>>> Regards
>>>> Michael Knill
>>>>
>>>> On 9/8/18, 7:52 am, "Lonnie Abelbeck" <li...@lonnie.abelbeck.com>
wrote:
>>>>
>>>> I have not seen such a thing. Does sound like a local network issue.
>>>>
>>>> Are you accessing it via a LAN device ? If so, (ex eth1) try
"arp-scan -l -I eth1" to look for duplicate IP's.
>>>>
>>>> Are you using a numeric IP or DNS name ? Self-signed or ACME ?
>>>>
>>>> Lonnie
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>> On Aug 8, 2018, at 4:43 PM, Michael Knill
<michael.kn...@ipcsolutions.com.au> wrote:
>>>>>
>>>>> No its every transaction on any page and I am talking 20 seconds
here. Its like its waiting for a DNS timeout or something but I couldn't see
anything with tcpdump?
>>>>>
>>>>> Regards
>>>>> Michael Knill
>>>>>
>>>>> From: David Kerr <da...@kerr.net>
>>>>> Reply-To: AstLinux List <astlinux-users@lists.sourceforge.net>
>>>>> Date: Wednesday, 8 August 2018 at 10:54 pm
>>>>> To: AstLinux List <astlinux-users@lists.sourceforge.net>
>>>>> Subject: Re: [Astlinux-users] Astlinux Web GUI slow
>>>>>
>>>>> Every page or just one in particular? I have found that the status
page can be slow to display if you have enabled a lot of the sections. In that
case one of the culprits seems to be DNS lookups (e.g. to list hosts for NTP
time sources, etc.). Lonnie and I did some work recently to speed up that page
by "multi threading" some of the data gathering.
>>>>>
>>>>> David
>>>>>
>>>>> On Wed, Aug 8, 2018 at 6:55 AM, Michael Knill
<michael.kn...@ipcsolutions.com.au> wrote:
>>>>>> Hi Group
>>>>>>
>>>>>> Im sure I have fixed this issue before but I cant remember what the
problem was. Think I may document it this time.
>>>>>> I have a site where the web GUI is very delayed e.g. it take a
number of seconds for each page to come up.
>>>>>>
>>>>>> Any ideas where I should start troubleshooting?
>>>>>>
>>>>>> Regards
>>>>>> Michael Knill
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users
Donations to support AstLinux are graciously accepted via PayPal to
pay...@krisk.org.
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users
Donations to support AstLinux are graciously accepted via PayPal to
pay...@krisk.org.
