RE: [cobalt-users] occasional session error SSL form refresh problem.

["Liam Delahunty" <mail@xxxxxxxxxxxxxxxxx>]

Just for the user list archives...

Dan Kriwitsky wrote:
> Is this specifically related to the Cobalt implementation of PHP? If
> not, I suggest a PHP list.

Thanks Dan, but it's isn't anything to do with PHP/MySQL, I just happened to
write the shopping system in that. I'm pretty convinced that it's a problem
with SSL.

Bradley Caricofe asked:
> Do you know what error it is they are getting, have you checked any
logfiles
> on the server for messages?

In /home/log/httpd/error I see the normal gpg errors (these are okay and
display even if the transaction works normally)
gpg: Warning: using insecure memory!
gpg: can't create '/tmp/.gnupg/random_seed': Permission denied

On the site logs, /home/sites/site#/log for the time of the reported
incident, nothings in particular is there...I guess there may be other error
logs somewhere...where?

Gerald Waugh has just sent me this which looks like the answer, :
look in httpd.conf find the following section, I have forgotten who
originally
fond this, but I believe it came from MS [ anyway it WILL fix it ]

              # Hardcoded, issues with mod_perl and cobalt modules.
              if (/^<\/Virtual/ and (-f "/etc/httpd/ssl/$group")) {
                      $ret = ssl_cert_check("/home/sites/$group/certs/");
                      if ($ret=~/^2/o) {
                              $PerlConfig .= "Listen $ip:443\n";
                              $PerlConfig .= "<VirtualHost $ip:443>\n";
#=============== a d d    t h e s e    l  n e s =============
  $PerlConfig .= "SetEnvIf User-Agent \".*MSIE.*\" \\n";
  $PerlConfig .= "nokeepalive ssl-unclean-shutdown\\n";
  $PerlConfig .= "downgrade-1.0 force-response-1.0\n";
#=================================================
                              $PerlConfig .= "SSLengine on\n";

Many thanks for your efforts,
Liam