I am running apache 1.3.12 + mod_ssl 2.6.4 (openssl 0.9.5a) + mod_php 
3.0.16 on RH Linux 6.0, though this problem has occurred in previous 
versions of the software (e.g. 1.3.9 + prev. mod_ssl).  mod_ssl is 
installed as a dso.

A user clicks a "submit" button on a form, or even a link, on an insecure 
page which loads a secure page.  In my testing, occasionally the first time 
you click the button it will come up with a server error e.g. "can't find 
page".  Clicking the back arrow and clicking the button again always works, 
and the problem will not recur in that session, but of course most users 
won't figure this out!  I generally use IE5 which is where this error has 
been happening, I haven't been able to reproduce it yet in Netscape.  The 
action of the URL is a complete url (e.g. "https://xxx.xxx.xxx/x.php3") 
which happens to be a different domain -- but same physical server - than 
the referring page, though I can't imagine that this could be related.

Any ideas?  My gut tells me that the server hangs for a sec when first 
starting a secure session and for some reason.  (My server hosts a few 
fairly low traffic web sites).  I thought installing it as a DSO might help 
but it still happens.  I can't seem to create a specific circumstance under 
which it will happen - e.g. if I restart httpd it won't do it the first 
time I hit the site, it just happenssometimes.

James Treworgy
[EMAIL PROTECTED]

______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to