My configuration:

I had a webserver with SSL accelerator on that.

I wrote a program, which try to get one page back as fast as possible.

One a laptop machine, I run 10 threads for the above program, then I always get some 
strange error
for my connection.

I installed ssldump (thanks for the hint in my last help request email) and get a full 
dump
of the traffic.

The error is looks like
---------------------------
New TCP connection #7758: 10.16.205.120(17674) <-> 10.16.112.49(443)
7753 8  0.0366 (0.0003)  C>S  application_data
7753 9  0.0386 (0.0019)  S>C  application_data
New TCP connection #7759: 10.16.205.120(17675) <-> 10.16.112.49(443)
7753    0.0386 (0.0000)  S>C  TCP FIN
7758    0.0025 (0.0025)  S>C  TCP FIN
7758 1  0.0025 (0.0000)  C>S  Handshake
      ClientHello
        Version 3.0 
        cipher suites
        SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA
        SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA
        SSL_RSA_WITH_3DES_EDE_CBC_SHA
        SSL_DHE_DSS_WITH_RC4_128_SHA
        SSL_RSA_WITH_IDEA_CBC_SHA
        SSL_RSA_WITH_RC4_128_SHA
        SSL_RSA_WITH_RC4_128_MD5
        SSL_DHE_DSS_WITH_RC2_56_CBC_SHA
        SSL_RSA_EXPORT1024_WITH_RC4_56_SHA
        SSL_DHE_DSS_EXPORT1024_WITH_DES_CBC_SHA
        SSL_RSA_EXPORT1024_WITH_DES_CBC_SHA
        SSL_RSA_EXPORT1024_WITH_RC2_CBC_56_MD5
        SSL_RSA_EXPORT1024_WITH_RC4_56_MD5
        SSL_DHE_RSA_WITH_DES_CBC_SHA
        SSL_DHE_DSS_WITH_DES_CBC_SHA
        SSL_RSA_WITH_DES_CBC_SHA
        SSL_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA
        SSL_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA
        SSL_RSA_EXPORT_WITH_DES40_CBC_SHA
        SSL_RSA_EXPORT_WITH_RC2_CBC_40_MD5
        SSL_RSA_EXPORT_WITH_RC4_40_MD5
        compression methods
                  NULL
------------------

Notice, 
1) the Server sends me a FIN as soon as the client opened the connection (for 
connection 7758).
2) there are more than couple thousands of retrieves already happened before this 
happen according to the dump file.


Question:
1) Who's problem is this?  Client or Server?
2) How could I trouble shooting it further?

Any advice?

Thanks in advance.
Lei



______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to