Article delegate-en/3713 of [1-5169] on the server localhost:119
  upper oldest olders older1 this newer1 newers latest
search
[Top/Up] [oldest] - [Older+chunk] - [Newer+chunk] - [newest + Check]
[Reference:<_A3711@delegate-en.ML_>]
Newsgroups: mail-lists.delegate-en

[DeleGate-En] Re: Questions about SSLway
18 Apr 2007 13:51:38 GMT feedback@delegate.org (Yutaka Sato)
The DeleGate Project


Hi,

On 04/18/07(17:40) you "Kwis Angelo" <phyhabdyi-re5dixtlohtr.ml@ml.delegate.org> wrote
in <_A3711@delegate-en.ML_>
 |I have the logs below after disabling session cache and allowing the
 |negotiation phase logging.  I tried several times.  The first one
 |(highlighted in blue) was able to do establish a session.  Not long after, I
 |did 3 consecutive tests (highlighted in red) and all encountered the the
 |same error.
 |
 |After 3 consecutive errors, all subsequent tests finally worked without even
 |restarting Delegate...what do you think is the problem?
 |
 |The process was now started with the following command:
 |
 |../delegated -v -P$DELEDATE_LISTNER_PORT SERVER=http FSV="sslway -ssl2 -Vrfy
 |-CAfile pems/TrivnetCA.crt -cert pems/ggs-delegate.crt -key pems/ggs-
 |delegate.key -pass pass:1234 " MOUNT="/* $HTTPS_HOST_URL/*" TLSCONF="-vd,
 |scache:no" RES_WAIT=0 DGROOT=/opt/gemalto/delegate951  >
 | /opt/gemalto/delegate951/log/delegate.txt 2>&1 &

The session cache seems not disabled because you did

  TLSCONF="-vd, scache:no"

istead of

  TLSCONF="-vd,scache:no"

as the log shows:

 |04/18 15:05:10.33 [6087] 0+0: arg[6] TLSCONF=-vd, scache:no
...
 |04/18 15:07:53.49 [6094] 1+1: ## SSLway loadSession 0.000038 (0 0) / -1
...
 |04/18 15:07:53.53 [6094] 1+1: ## SSLway -- 0.013015 loadSession NONE
...
 |04/18 15:09:45.98 [6096] 2+1: ## SSLway loadSession 0.000494 (1 0) / 1
...
 |04/18 15:10:52.15 [6100] 3+1: ## SSLway loadSession 0.000458 (1 0) / 1
...
 |04/18 15:12:09.57 [6102] 4+1: ## SSLway loadSession 0.000466 (1 0) / 1

If the above does not take effect, disabling xcache might be effecitive:

  TLSCONF="-vd,scache:no,xcache:no"

Cheers,
Yutaka
--
  9 9   Yutaka Sato <y.sato@delegate.org> http://delegate.org/y.sato/
 ( ~ )  National Institute of Advanced Industrial Science and Technology
_<   >_ 1-1-4 Umezono, Tsukuba, Ibaraki, 305-8568 Japan
Do the more with the less -- B. Fuller

  admin search upper oldest olders older1 this newer1 newers latest
[Top/Up] [oldest] - [Older+chunk] - [Newer+chunk] - [newest + Check]
@_@V