Re: [AOLSERVER] SSL handshake error

2003-03-11 Thread Scott Goodwin
I need to know the browser type, version and strength (e.g. MSIE 5.5 128-bit, Netscape 4.7 40-bit...). Oscar, when you say you're seeing the exact same problem, do you mean you're seeing both the error message and the browser is failing on the first connect? /s. On Tuesday, March 11, 2003, at

Re: [AOLSERVER] SSL handshake error

2003-03-11 Thread Dossy
On 2003.03.10, William Scott Jordan [EMAIL PROTECTED] wrote: Error: nsopenssl: EOF during SSL handshake I never used to see this error (and I have session caching turned off) until the recent OpenSSL exploits came about. Ever since then, every couple of hours I'll see this in my logs ... the

Re: [AOLSERVER] SSL handshake error

2003-03-11 Thread William Scott Jordan
So I switched session caching on last night and when I checked the logs this morning, I see that there were a couple of new EOF during SSL handshake errors. Checking the access log, it looks like something funny was going on; Non-existent files being accessed and such. I think Dossy might be

Re: [AOLSERVER] SSL handshake error

2003-03-11 Thread Scott Goodwin
Note that you will see some EOFs in the log files that are normal and aren't due to failures. I see them all the time because we're using client certs -- MSIE makes a connection, realizes the server wants a client cert, cuts the conn (EOF), asks the user which client cert they want to use, then

Re: [AOLSERVER] SSL handshake error

2003-03-11 Thread Oscar Bonilla
Ok, so maybe I was not seeing the *exact* same problem ;) I was just seeing the error messages in the log. I had seen the server error message on the browsers some time ago, but I expected the error messages to also go away. I guess it must be the OpenSSL exploit then... any way to check and make

[AOLSERVER] SSL handshake error

2003-03-10 Thread William Scott Jordan
I'm running AOLServer 3.4 with OpenSSL 0.9.6 and nsopenssl 2.2b4 on Redhat 7.0 and I'm getting this error quite a bit: Error: nsopenssl: EOF during SSL handshake I have no idea what's causing it and I can't recreate it. When it happens, it gives the end user a Server Error message. Reloading

Re: [AOLSERVER] SSL handshake error

2003-03-10 Thread Scott Goodwin
Do you have session caching turned on? /s. On Monday, March 10, 2003, at 11:00 PM, William Scott Jordan wrote: I'm running AOLServer 3.4 with OpenSSL 0.9.6 and nsopenssl 2.2b4 on Redhat 7.0 and I'm getting this error quite a bit: Error: nsopenssl: EOF during SSL handshake I have no idea

Re: [AOLSERVER] SSL handshake error

2003-03-10 Thread William Scott Jordan
ServerSessionCache is set to false. Scott At 11:12 PM 3/10/2003 -0600, you wrote: Do you have session caching turned on? /s. On Monday, March 10, 2003, at 11:00 PM, William Scott Jordan wrote: I'm running AOLServer 3.4 with OpenSSL 0.9.6 and nsopenssl 2.2b4 on Redhat 7.0 and I'm getting this