[prev in list] [next in list] [prev in thread] [next in thread] 

List:       apache-ssl
Subject:    Re: [apache-ssl] no response with Netscape Communictor
From:       Ben Laurie <ben () algroup ! co ! uk>
Date:       1998-11-23 17:09:53
[Download RAW message or body]

Shim, Moonbo wrote:
> 
> Eckard Wille wrote:
> 
> > > I'm using Apache/1.3.3 Ben-SSL/1.29.
> > >
> > > Client authentication is set as followings for the server.
> > > SSLVerifyClient 2
> > > SSLVerifyDepth 10
> > >
> > > Set the Netscape Communicator to ask for me to select my certificate.
> > > And my private key in the browser is protected by password.
> > > So, it takes a few seconds to connect  the server at first time.
> > > Then, I get no response from the server forever(?).
> > > If I click the stop button of the browser, the apache server logs the
> > > following.
> > >
> > > [Fri Nov 20 12:54:33 1998] [debug] apache_ssl.c(469): SSL_accept
> > > returned 0
> > >
> > > For the second try with same settings, the connection may succeeds.
> > > If I set "automatically select certificate" option or no key protection
> > > with browser,
> > > I have never had that kind of error.
> > > Why does not the server answer?
> > > Give me any idea to avoid this kind of error.
> > >
> > > I found the following comment from apache_ssl.c.
> > >        /* This appears to happen when a connection is closed without any
> > >
> > >            data being sent. Since Netscape does this all the time, don't
> > >
> > >            log as an error.
> > >            */
> > > Is this comment about my error?
> > > Then, please explain to me the comment more...
> > >
> > > Thanks.
> > > ( I'm sorry about my poor english. )
> >
> > Hi Moonbo,
> >
> > a few month ago I got exactly the same error as described by you. I
> > tried to find a solution with the guys from stronghold, but finally we
> > found that it was Netscapes fault. I worked on by setting up no password
> > for my private cert file, relying on NTFS file restrictions.
> > Unfortunately you ,running Win95 :-(, will be unable to protect your
> > certs unless you use third party solutions hiding your files from
> > others.
> > If you are able to upgrade all your Communicator installations, I would
> > suggest installing 4.5 cause I didn't realize that error with Netscape's
> > new browser version.
> >
> > hope that helps, Eckard
> 
> Hi, Eckard.
> 
> Very helpful to me.
> But Netscape 4.5 may have the same problem.
> Some day I've seen the error with Netscape Communicator 4.5.
> And Netscape Communicator never shows me the error with Netscape Enterprise Web Server.
> Netscape is not friendly with the apache web server... :-)

Hang on - I use Netscape with Apache-SSL and client certs all the time
and I _never_ have this problem. There must be something else going
on...

Cheers,

Ben.

-- 
Ben Laurie            |Phone: +44 (181) 735 0686| Apache Group member
Freelance Consultant  |Fax:   +44 (181) 735 0689|http://www.apache.org/
and Technical Director|Email: ben@algroup.co.uk |
A.L. Digital Ltd,     |Apache-SSL author     http://www.apache-ssl.org/
London, England.      |"Apache: TDG" http://www.ora.com/catalog/apache/

[prev in list] [next in list] [prev in thread] [next in thread]