Even after doing all the mentioned steps, I am still getting the
following errors (ofcourse the no. of errors reduced significantly),

mod_ssl: SSL handshake interuupted by system [Hint:......] (System error
follows)
System: Connection Reset by peer (errno: 131)

AND
mod_ssl: SSL handshake interuupted by system [Hint:......] (System error
follows)
System: Broken pipe (errno: 32)

off late, I haven't heard any user complaining about page not displayed
error, but in the log files I can see above lines consistantly. 

We are on Apaceh 1.3.12/ mod_ssl/2.6.6 OpenSSL/0.9.5a on Solaris 2.6
box.



Rajidhar Etta 
eComServer, Inc 
770.750.6594 (Till Friday)
609.203.3697 (Cell) 
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Bryan Field-Elliot
Sent: Tuesday, December 18, 2001 12:57 PM
To: [EMAIL PROTECTED]
Subject: RE: OpenSSL I/O error causing "Page cannot be displayed" in
browser


Sorry you already gave up, but I believe the lines below should fix your
problem (in addition to the SetEnvIf line you already added): 


SSLSessionCache         dbm:/var/ssl_cache 
SSLSessionCacheTimeout  300 

(change the path in the first line to one which makes sense on your
server) 

I had huge problems with IE as well, and adding the above, plus the
SetEnvIf, fix them. This was about a year or more ago, but I still have
the lines in there, and, I still get no complaints. 

Bryan 



On Tue, 2001-12-18 at 10:44, Aaron Gee wrote: 
We finally gave up.  In our new install Win 98 and 95 IE users are
simply
SOL (Sh** Out of Luck) unless they use another browser.  Win 2000 and
SOME
NT machines seem to work fine.  The confusing thing is that the build
numbers on IE are inconsistent.  Build 5.05.blah.blah.blah may work on
NT
sometimes, but not always (depends on service pack or hot fixes???? )
win 2k
always works after service pack, doesn't work after fresh install. etc
etc
etc

The answer provided below didn't work, the answers in the MS knowledge
base
didn't work, and every answer in this mailing list and in others have
failed, miserably, and repeatedly.  Funny thing? I run mod_ssl and
apache on
a few older servers (RH 7.0), cert from the same authority (THAWTE).  No
problems.  New RH 7.2 install, might as well go use an NT machine with a
cert so that people could actually sign up. In fact that's what we did.
At
least this way we could keep keepalive on and a few other normal
settings so
that performance doesn't go to cr*p under load.

:(

AG


> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of Manfred Haertel
> Sent: Tuesday, December 18, 2001 12:13
> To: [EMAIL PROTECTED]
> Subject: Re: OpenSSL I/O error causing "Page cannot be displayed" in
> browser
>
>
> Jason wrote:
>
> > For at least a year we have been getting complaints about
> people getting "Page cannot be displayed" when using IE.  We have
tried
> > disabling certain ciphers, and disabling keep alive to no avail.
> >
> > I have read MANY openssl, modssl and apache suggestions on how
> to prevent this problem and none have worked.
>
> The following lines in httpd.conf solved the problem for us:
>
> SetEnvIf User-Agent ".*MSIE.*" \
>          nokeepalive ssl-unclean-shutdown \
>          downgrade-1.0 force-response-1.0
>
> --
> Manfred Härtel           mailto:[EMAIL PROTECTED]
>                          http://rz-home.de/mhaertel
> ______________________________________________________________________
> Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
> User Support Mailing List                      [EMAIL PROTECTED]
> Automated List Manager                            [EMAIL PROTECTED]
>

______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to