RE: [cobalt-users] occasional session error SSL form refresh problem.

["Liam Delahunty" <mail@xxxxxxxxxxxxxxxxx>]

Paul Alcock wrote:

> Liam is not the only one with that problem
> I have the same problem on RAQ2 none php. The error is simply
> page not found. However, the cgi that my process calls runs, its
> just the page that does not display.
> Using the back button and resubmitting the secure form then works
> and finds the page ok.
>
> I brought this subject up before and someone posted a solution
> but there was no matching reference in a RAQ2
>
> Couldn't find the reference in my email lists but it must be in
> the archives, the reference was to a M'soft problem and I'm sure
> it was a http.conf entry.

Hi,

Sorry if this is almost a duplicate post. I did post a potential solution
sent to me by Gerald Waugh and  others for the archives several hours ago
but it still hasn't turned up. I expect it'll show within seconds of sending
this...

<quote>
look in httpd.conf find the following section, I have forgotten who
originally
fond this, but I believe it came from MS [ anyway it WILL fix it ]

        # Hardcoded, issues with mod_perl and cobalt modules.
        if (/^<\/Virtual/ and (-f "/etc/httpd/ssl/$group")) {
            $ret = ssl_cert_check("/home/sites/$group/certs/");
            if ($ret=~/^2/o) {
                $PerlConfig .= "Listen $ip:443\n";
                $PerlConfig .= "<VirtualHost $ip:443>\n";
#=============== a d d   t h e s e   l  n e s =============
                $PerlConfig .= "SetEnvIf User-Agent \".*MSIE.*\" \\n";
                $PerlConfig .= "        nokeepalive
ssl-unclean-shutdown\\n";
                $PerlConfig .= "        downgrade-1.0 force-response-1.0\n";
#=================================================
                $PerlConfig .= "SSLengine on\n";

</end>

and more info can be found here:
http://www.modssl.org/docs/2.8/ssl_faq.html#ToC49

As Ian Wilson kindly pointed out to me, this fix may need to be global.

kind regards,
Liam

2002-02-21 20:42