On Mon, 1 Nov 1999, David Kerry wrote:
> On Mon, Nov 01, 1999 at 09:15:23AM +0100, [EMAIL PROTECTED] wrote:
> > On Sun, Oct 31, 1999, [EMAIL PROTECTED] wrote:
> Yup - I'm using the DSO facility. I would hate to have to give this up as
> it's tremendously useful.
>
> Here's a bit more information I've uncovered so far:
>
> - apache will still serve up ssl connections to _some_ users once it gets into this
> segfault loop state. I haven't quite figured it out yet, but it appears to
> only allow ssl connections to a user who has previously connected before it had
> problems. It's not based on ip address, because from behind a masquerading
> firewall, I can connect with Netscape on Linux just fine, but if I switch to
> using Netscape under windows, apache segfaults (I primarily use Linux, so that
> would have been what was used for the original access). This only started
> happening once I switched to the MM session cache. Before that, it would
> segfault for everybody.
I have had the same problem you described, I need to shutdown and restart
the web server for SSL connections to work after a period of time. I have
also noticed that export browsers don't work as reliably as the 128 bit
domestic version I have on my Windows system.
I am having this problem with:
Apache 1.3.9
mod_ssl 2.4.6
OpenSSL 0.9.4
mod_php 3.0.12
AuthMySQL 2.20
I had the same problem before I upgraded OpenSSL, mod_ssl and Apache, and
added AuthMySQL 2.20 after the problem started occurring (it has had no
effect). I'm using also using DSO.
I'm using the following configuration directives aside from loading the
module, and declaring certificate/key files.
SSLSessionCache none
SSLCipherSuite ALL
SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown
SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown
--
Charles P. Wright
[EMAIL PROTECTED]
http://w3.cpwright.com/
The trouble with computers is that they do what you tell them, not what
you want.
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
