Re: [users@httpd] Intermittent problem with Apache, PHP and SSL

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



I know what Server not found means, but the fact that it happens ONLY
when submitting a CERTAIN form, ONLY in IE, and ONLY in SSL makes it
suspicious.  If you read my second post about it, it turns out to be a
problem with IE's keepalive during SSL sessions.

Adding the following to the VirtualHost of httpd for the SSL sections
solved the problems.

SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown
downgrade-1.0 force-response-1.0

It's funny really, I looked for answers for this for like a month, and
two hours or so after posting to this board, I just stumble across the
solution.

-Jesse

On 6/21/06, Boyle Owen <Owen.Boyle@xxxxxxx> wrote:
> -----Original Message-----
> From: Jesse Gumm [mailto:dkpsys@xxxxxxxxx]
> Sent: Tuesday, June 20, 2006 6:42 PM
> To: users@xxxxxxxxxxxxxxxx
> Subject: [users@httpd] Intermittent problem with Apache, PHP and SSL
>
> So I'm encountering an EXTREMELY intermittent error with Apache, PHP
> and SSL, and I THINK it might be an IE only problem, though I haven't
> the slightest clue what could be causing the problem, and I haven't
> been able to reproduce the error.  I've tried searching for this all
> over the place, and so far nothing helpful.  Not even any helpful
> leads.
>
> People are getting server not found
                     ^^^^^^^^^^^^^^^^

That means the client couldn't resolve an IP address for the server domain name. That sounds more like a DNS or netwrok problem and nothing to do with apache. What is the *exact* error message in the client (turn off "friendly" messages)?

Rgds,
Owen Boyle
Disclaimer: Any disclaimer attached to this message may be ignored.


> when trying to submit a form
> that's SSL encrypted, and it seems to only affect this one particular
> form.  I'm getting no errors logging either, which leads me to believe
> that it's actually somehow rewriting the url in the page or in the
> submission.  That's proposterous, but it's the only thing I can think
> of.
>
> The form tag looks like:
>
> <form action="editprofile.php" method=post>
>
> My hypothesis is further backed up by some file-not-found errors that
> WERE logging for random attempts to access the file
> editprofile.phpxxxxxxxxx, where the x's are random hex characters
> (1-F).  It looked like it was rewriting the url and tacking 8 or so
> random hex characters to the file.  To fix this problem, I modifed the
> form tag to be
>
> <form action="editprofile.php?" method=post>
>
> Which stopped the "file not found" error.
>
> I've also removed the "form=fakeaction" from the url.rewrite
> configuration setting in PHP and I'm still getting reports of this
> error.  This error also only seems to appear when it's using SSL.
>
> I'm using OpenBSD with the stock Apache 1.3.29 with PHP 5.0.5 and
> OpenSSL is 0.9.7g
>
> Any ideas?  I'm not sure if this is error is Apache, PHP, SSL, IE, or
> if there's something wrong with my code that I just don't see.  It
> sounds to me like an IE error, since IE seems to be the only affected
> browser, but I can't be sure, and there has to be a way around it if
> it IS an IE error, since IE is 55% of my traffic.
>
> Any ideas?
>
> Thanks
> -Jesse
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP
> Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
>    "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
> For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
>
Diese E-mail ist eine private und persönliche Kommunikation. Sie hat keinen Bezug zur Börsen- bzw. Geschäftstätigkeit der SWX Gruppe. This e-mail is of a private and personal nature. It is not related to the exchange or business activities of the SWX Group. Le présent e-mail est un message privé et personnel, sans rapport avec l'activité boursière du Groupe SWX.


This message is for the named person's use only. It may contain confidential, proprietary or legally privileged information. No confidentiality or privilege is waived or lost by any mistransmission. If you receive this message in error, please notify the sender urgently and then immediately delete the message and any copies of it from your system. Please also immediately destroy any hardcopies of the message. You must not, directly or indirectly, use, disclose, distribute, print, or copy any part of this message if you are not the intended recipient. The sender's company reserves the right to monitor all e-mail communications through their networks. Any views expressed in this message are those of the individual sender, except where the message states otherwise and the sender is authorised to state them to be the views of the sender's company.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
   "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx



---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
  "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx



[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux