Well when you stay on F5 key, you force Internet Explorer to close the current 
connections and recreate new ones. ( It may even multiply the number of simultaneous 
connections as well. You can end up with 20 simultaneous connections for example, 
instead of the normal 2 to 4 ones )

Some maybe be some are closed during the handshake, and then you'll see some error 
messages at server side, it just seems normal to me.

I dont know s_server but i suppose it uses openssl with thread safety activated  btw.
Be sure you did add the code needed to assume thread safety in openssl to your HTTPS 
application.
Without that you can also see such errors.

-----Original Message-----
From: Michael Lee [mailto:[EMAIL PROTECTED]
Sent: mercredi 31 décembre 2003 3:46
To: [EMAIL PROTECTED]
Subject: Occasional ssl23_read() failure



I tried to run s_server (version 0.9.6l) with the following options:

    openssl s_server -accept 443 -cert cert.pem -key key.pem -www

I use IE6.0 (with default settings) to connect to this server. It works
fine except when I press and *hold down* the F5 key (the shortcut key for
refreshing the page) to repeatedly reload the page. When I do that, I get
occasional errors:

    1560:error:140780E5:SSL routines:SSL23_READ:ssl handshake
    failure:.\ssl\s23_lib.c:180:

I am doing this because a similar problem occurs in my HTTPS application
that uses OpenSSL. When there are many simultaneous (or close to
simultaneous) connections from IE, SSL_accept() returns -1 occassionally
and SSL_get_error() returns SSL_ERROR_SYSCALL. I believe it is caused by
the same kind of handshake failure. I am able to repeat the problem with
s_server on both Win32 and Solaris 8.

Does anyone know if there is a workaround or should I use some special
options?


Michael Lee

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to