Hi,
we are setting up a new site and were hoping to serve it almost exclusively
via SSL. However, we are experiencing severe problems with lurking https
requests. Many clients say that they see infinitely long "waiting for reply"
on their browsers. We've also seen https sockets in FIN_WAIT2 state on the
server side.
Unfortunately, I cannot reproduce it with my set of browsers here, but I've
made some preliminary tests using curl to request our SSL home page
periodically. Indeed, from time to time the request hangs forever!
I have standard server setups (Apache 1.3.6/9, mod_ssl 2.3.10/4.8,
openssl 0.9.3/4) with "nokeepalive ssl-unclean-shutdown" for MSIE.
The secure site is https://www.bivio.com/
For testing, we've had the site temporarily opened for non-SSL access,
everything was fine then and clients enjoyed the fast response times.
We therefore assume there are some bugs in the current SSL implementation
and probably are forced to dump it until we can do further investigations.
If anyone has a hint on what we could try, please do so ;-)
Thanks,
Martin
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]