I'm probably wrong about this, but I suspect that the load-balancing of
SSL/TLS is the source of your problems.

When an SSL/TLS connection is created, the connection between the server and
the client. The other two servers will know nothing about the session.
Unless the load balancer itself supports the SSL connection then you will
get errors from the other servers when the client attempts to use a key
these servers know nothing about.

- 
John Airey
Internet Systems Support Officer, ITCSD, Royal National Institute for the
Blind,
Bakewell Road, Peterborough PE2 6XU,
Tel.: +44 (0) 1733 375299 Fax: +44 (0) 1733 370848 [EMAIL PROTECTED] 



-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: 18 July 2000 11:26
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Subject: [BugDB] Problems connecting to https thru RadWare WSD (PR#413)


Full_Name: Martin Sperl
Version: 2.6.4_1.3.12
OS: linux
Submission from: (NULL) (131.130.36.60)


Hi!

We are experiencing problems accessing 
our WWW servers using https on netscape Linux.
But Alpha OSF netscape, Windows netscape, Explorer
works. (Old versions of Netscape on Linux seem to 
work too...)

The setup is that we have got several web servers behind
a loadbalancing WSD from RADWARE. So the structure is something
like this:

Internet -> WSD -> Web1
               \-> Web2
               \-> Web3


Then I tried:
openssl s_client -connect web1:443 -state -debug
works fine when typing GET /

on the other hands:
openssl s_client -connect wsd:443 -state -debug
stops at:
SSL_connect:SSLv2/v3 write client hello A

What is wrong?

Thanks in advance,
                        Martin Sperl

P.s: Sometimes it gets thru to:
SSL_connect:SSLv3 write finished A
SSL_connect:SSLv3 flush data

But just sometimes - most of the times it hangs immediately

______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to