January 7, 2009 09:25pm pst

There are currently no qualifying experts in OpenBSD

1. gheist 137,088
2. it_alchem... 20,000
3. sunnycoder 7,324
4. JustUNIX 4,000
5. Crossley 3,470
6. noci 3,200
7. DonKoyote 2,500
7. SteveSloan 2,500
9. jimbb 2,330
10. svs 2,000
10. jasonsbytes 2,000
10. smokeyser 2,000
10. vico1 2,000
10. chingmd 2,000
10. anfi 2,000
10. biscuit3 2,000
10. nixfreak 2,000
10. rindi 2,000
19. ColinWeb... 1,800
19. ryanhunt 1,800
21. mutahir 1,500
21. eoinosullivan 1,500
23. srgilani 1,300
24. ahoffmann 1,250
25. lqw 1,120

09.12.2008 at 08:36AM PDT, ID: 23726777 | Points: 250

	[x] Attachment Details

OpenBSD 4.2/Apache 1.39 Proxy Server errors

Zones:

Apache Web Server, Microsoft IIS Web Server, OpenBSD

Tags:

OpenBSD 4.2, Apache, 1.39, mod_ssl/, OpenBSD 4.2/Apache 1.39 Proxy Server errors

I am running proxy servers with the following Apache, mod_ssl and OpenSSL:

Server: Apache/1.3.29, Interface: mod_ssl/2.8.16, Library: OpenSSL/0.9.7j

I am taking intermittent errors in the /var/www/logs/access_log and error_log files.

End-users are occasionally taking Proxy Server errors (not getting enough info from end-users. Am trying, though)

Please see /var/www/logs/error_log excerpt below.

I have also included an excerpt of /var/www/conf/httpd.conf file (see bottom of email)

Any suggestions on why the mod_ssl: SSL handshare interrupted by system keep occurring other than pressing stop in the browser. We are trying to narrow the issue down and appreciate the help with this:

         
           
             1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
15:
16:
17:
18:
19:
20:
21:
22:
23:
24:
25:
26:
27:
28:
29:
30:
31:
32:
33:
34:
35:
36:
37:
38:
39:
40:
41:
42:
43:
44:
45:
46:
47:
48:
49:
50:

           
           
             snippet from "/var/www/logs/error_log"
 
/htdocs/aspnet_client/system_web/1_1_4322/WebUIValidation.js
[Tue Sep  9 13:39:57 2008] [error] [client 69.210.110.185] File does not exist:
/htdocs/aspnet_client/system_web/1_1_4322/WebUIValidation.js
[Tue Sep  9 13:40:13 2008] [error] [client 69.210.110.185] File does not exist:
/htdocs/aspnet_client/system_web/1_1_4322/WebUIValidation.js
[Tue Sep  9 13:43:56 2008] [error] [client 216.170.204.245] File does not exist:
 /htdocs/aspnet_client/system_web/1_1_4322/WebUIValidation.js
[Tue Sep  9 13:44:57 2008] [error] [client 141.106.128.4] File does not exist: /
htdocs/favicon.ico
[Tue Sep  9 13:47:11 2008] [error] mod_ssl: SSL handshake interrupted by system
[Hint: Stop button pressed in browser?!] (System error follows)
[Tue Sep  9 13:47:11 2008] [error] System: Connection reset by peer (errno: 54)
[Tue Sep  9 13:50:23 2008] [error] mod_ssl: SSL handshake interrupted by system
[Hint: Stop button pressed in browser?!] (System error follows)
[Tue Sep  9 13:50:23 2008] [error] System: Connection reset by peer (errno: 54)
[Tue Sep  9 13:51:01 2008] [error] mod_ssl: SSL handshake interrupted by system
[Hint: Stop button pressed in browser?!] (System error follows)
[Tue Sep  9 13:51:01 2008] [error] System: Connection reset by peer (errno: 54)
[Tue Sep  9 13:56:37 2008] [error] mod_ssl: SSL handshake interrupted by system
[Hint: Stop button pressed in browser?!] (System error follows)
[Tue Sep  9 13:56:37 2008] [error] System: Connection reset by peer (errno: 54)
[Tue Sep  9 13:57:16 2008] [error] mod_ssl: SSL handshake interrupted by system
[Hint: Stop button pressed in browser?!] (System error follows)
 
snippet from /var/www/conf/httpd.conf
 
BrowserMatch ".*MSIE.*" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-res
ponse-1.0
 
# The following directives modify normal HTTP response behavior.
# The first directive disables keepalive for Netscape 2.x and browsers that
# spoof it. There are known problems with these browser implementations.
# The second directive is for Microsoft Internet Explorer 4.0b2
# which has a broken HTTP/1.1 implementation and does not properly
# support keepalive when it is used on 301 or 302 (redirect) responses.
#
BrowserMatch "Mozilla/2" nokeepalive
BrowserMatch ".*MSIE.*" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-res
ponse-1.0
#BrowserMatch "MSIE 4\.0b2;" nokeepalive downgrade-1.0 force-response-1.0
#
# The following directive disables HTTP/1.1 responses to browsers which
# are in violation of the HTTP/1.0 spec by not being able to grok a
# basic 1.1 response.
#
BrowserMatch "RealPlayer 4\.0" force-response-1.0
BrowserMatch "Java/1\.0" force-response-1.0
BrowserMatch "JDK/1\.0" force-response-1.0

           
         

Start your 7 day free trial to see this answer

Top Expert:	gheist
Expert Since:	03/18/2003
Accepted Solutions:	2027

gheist has been an Expert for 5 years 9 months, during which he has posted 10211 comments and answered 2027 questions. gheist is just one of 1164 experts in the Apache Web Server Zone.

#	Title
1	Apache and SSL Problem
2	SSL with Apache.
3	Help optimizing Apache settings in http…
4	Enable SSL in Apache 2.2.4 after …
5	Need help with SSL configuration.
6	what should i change on httpd.conf c…