The lines from httpd.conf are:
SSLSessionCache dbm:/usr/local/apache/logs/ssl_scache
SSLSessionCacheTimeout 300
Should we maybe be using shm instead? I can imagine that dbm would have
trouble if there was a lot of concurrent access attempts.
The server gets about 50,000 to 100,000+ page views per day, and there are
around 25-50 active sessions/logins in our web application during the day.
Also, the errors you said were normal...is that because the user pressed the
Stop button? I don't think that is the case in this situation, because
there are a ton of them all in a row, which normally wouldn't happen if the
users were pressing stop occasionally.
-----Original Message-----
From: David Rees [mailto:[EMAIL PROTECTED]]
Sent: Thursday, January 11, 2001 10:46 AM
To: [EMAIL PROTECTED]
Subject: RE: modssl problems under heavy load
> [Mon Dec 18 20:32:59 2000] [error] mod_ssl: SSL handshake failed (server
> webmail1.asu.edu:443, client x.x.x.x) (OpenSSL library error follows)
> [Mon Dec 18 20:32:59 2000] [error] OpenSSL: error:1409D08A:SSL
> routines:SSL3_SETUP_KEY_BLOCK:cipher or hash unavailable
I'm not sure about these ones...
> [Mon Dec 18 21:34:38 2000] [error] mod_ssl: SSL handshake interrupted by
> system [Hint: Stop button pressed in browser?!] (System error follows)
> [Mon Dec 18 21:34:38 2000] [error] System: Connection reset by
> peer (errno:
> 104)
These are normal.
> [Tue Dec 19 07:22:43 2000] [error] mod_ssl: SSL error on reading data
> (OpenSSL library error follows)
> [Tue Dec 19 07:22:43 2000] [error] OpenSSL: error:1408F071:SSL
> routines:SSL3_GET_RECORD:bad mac decode [Hint: Browser still remembered
> details of a re-created server certificate?]
Not sure about these, either.
What type of load are you experiencing (hits, users)?
What's your server configuration? I'm guessing it's some sort of problem
with the SSLSessionCache, which one are you using?
-Dave
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
