Hi there!
I've installed Apache+mod_ssl-2.0.11-1.3.2 on SCO machine...
Everything works correctly except that I noticed that my sessions are
very long cached in gcache and very randomly timeouted although I've set
SSLSessionCacheTimeout to 15 sek as in standard conf file.
So I looked up the ssl_gcache* programs and voila! found a thing that
looks very much like a bug to me:
In file ssl_gcachecommon.c in subroutine LocalCacheFind (row 189) there
is a static int variable nCalls that _is_not_initialized_? And later
this nCalls is increased and compared to 1. So the results are
unpredictable here?
I overcome this bug by uncommenting the if-thing there and executing
ExpireCache every time LocalCacheFind is called. This way
SSLSessionCacheTimeout works correctly.
This way LocalCahceFind scans cache entries before every find. But, isn't
there a better way to do the cahce expiry by adding the tExpiresAt
verification into LocalCacheFind routine itself and doing the
ExpireCache only after every, say, 100 LocalCacheFind calls (to ensure
that entries will be freed at last)?
PS! It wold be nice to have some gcache information also on server-status
page as generated by mod_status module. Can it be done with patching
mod_status or has it be separate module. I can do this if somebody gives
me some guidlines how to get all cache entries from gcache?
PS/2! I know there will be some dbm-based cahceing in the next main
release of mod_sssl but I'd like to run some reliable session-cacheing
SSL-server today...
PS/3! As I wrote first time in this list I'd like to thank
R.S.Engelschall and B.Laurie for their work they have done on giving the
community really best SSL-servers in the world. And I am really sorry that
you two can not cooperate to make one product even better. I only can say
that apache-ssl and mod_ssl are good serves both.
Regards,
.m�Rt.
______________________________________________________________________
Apache Interface to SSLeay (mod_ssl) www.engelschall.com/sw/mod_ssl/
Official Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
