> Here's what worked, on Linux 2.2.8, on a dual PII, for us -- not
> expiring the shmem cache:
> 
> 
> 
> and adding the following to root's crontab:
> 
> 0 3 * * * /opt/www/sbin/apachectl graceful >&/dev/null;
> 
> YES, IT'S BUTT UGLY....

[snip]

> Feel free to flame me as necessary.  I am not 100% sure of the
> ramifications of this hack.

Hey, I'm even dumber than I thought.  If I let people have 24 hours to
crack a key they could realistically do it, whereas recycling my
database connections once every four hours or so just isn't that big a
deal.  So something more like 

SSLSessionCacheTimeout  14400                                          #
added to httpd.conf

and

0 3,7,11,15,19,23 * * * /opt/www/sbin/apachectl graceful >&/dev/null;  #
added to crontab

seems to make more sense, although of course it doesn't solve the
fundamental problem.
(Running make test for mm-1.06 on Linux 2.2.8 indicates it works fine,
but... not really.)

-- 
     "Porn fills the need in the heart of every human to observe
     without being observed. Why actually go to jail when you can
     just watch people be tied up, or see 12 chicks squabbling over
     a cucumber and 10 cubic meters of jello?"           --Defiler
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to