dupuis...@ymail.com
unread,Nov 4, 2011, 10:56:03 AM11/4/11You do not have permission to delete messages in this group
Either email addresses are anonymous for this group or you need the view member email addresses permission to view the original message
to
Hello,
I have an embedded device (with limited ressources) that needs to
connect to an OpenSSL server (Apache2).
The device works very well with many SSL servers with OpenSSL, but not
on some Apache2 servers, because there's a timeout,
after 10 seconds the server always send a "close_notify" alert (part
of the SSL session, and encrypted).
The problem is that the duration of the whole handshake protocol on my
small device is about 8 seconds and then the record (encrypt the GET
request) is about 3 seconds... This makes a total of 11 seconds, so I
am just 1 second over the timeout...
I have disabled the timeout on Apache2, so this concerns only SSL...
I ran ssldump on the server, as you can see in the logs(attached), the
close_notify alert is sent just before the application data of the
record is sent to server,
and the server never answers to this application data.(it should
return some HTML content).
Have you got a trick, or a solution to disable or extend this timeout
properly on the server side without modifying the OpenSSL source
code...
In the configuration file of the virtual host, I have tried some of
these options:
---------------------------------------------------------------
SetEnvIf User-Agent "TLS test" \
nokeepalive
---------------------------------------------------------------
But the result is that the session is always closed after 10 seconds,
only on this particular server(Apache2 + OpenSSL)..., this is not the
case on other servers...
(sorry my previous mail was badly formated, so another try...)
Regards.