Hi,
Just to let everyone know that the problem turned out to be that SSL
applications on Windows (the TortoiseSVN client in our case) lookup
www.download.windowsupdate.com to get updates to the certificate revocation
list. See http://support.microsoft.com/kb/317541
We operate in an environment
I suspect client behavior is incorrect. It could have to do with 1.1
HTTP, especially if client is PHP (because of 100 continue
problems). There are several other documented delays including a 15
second default keep alive. There is also a cURL problem that can
cause this on the client side.
Hi,
> Thanks for the input guys, however the 15 second pause exists even if i
> explicitly disable reverse lookups in apache 'Hostnamelookups Off' in
> httpd.conf and my server is operating on an internal network in a company so
> although i cant say for sure i doubt there is much IPV6 stuff ar
Matthew Fletcher wrote:
Hi,
Thanks for the input guys, however the 15 second pause exists even if i
explicitly disable reverse lookups in apache 'Hostnamelookups Off' in
httpd.conf and my server is operating on an internal network in a company so
although i cant say for sure i doubt there is
* Matthew Fletcher, Wednesday, April 27, 2011 12:40 PM
> I guess that does not 100% rule out DNS/Network stuff, as SSL
> could be doing extra network lookups.
>
> Are there any more SSL diagnostics i can enable to try and
> pinpoint the problem ?
maybe checking with strace -ttt -p ... which op
Hi,
Just to test if my slowness is SSL or DNS/Network related i switched the server
in http mode and got the guys to re-connect. Connection times are now
sub-second. So my slowness is definatly https / SSL related.
I guess that does not 100% rule out DNS/Network stuff, as SSL could be doing
ex
[mailto:a.l.m.bu...@lboro.ac.uk]
> Sent: 26 April 2011 23:05
> To: openssl-users@openssl.org
> Cc: Matthew Fletcher
> Subject: Re: slow https conenctions
>
> Hi,
> > On 04/26/11 3:06 AM, Matthew Fletcher wrote:
> > > I've come to this list in search of help with slo
Hi,
> On 04/26/11 3:06 AM, Matthew Fletcher wrote:
> > I've come to this list in search of help with slow https conenctions (via
> > the subversion, apache and finally mod_ssl lits).
> >
> > There is a 15 second ish delay whenever a client connects using https,
>
> 15 seconds sounds to *me* like
On 04/26/11 3:06 AM, Matthew Fletcher wrote:
I've come to this list in search of help with slow https conenctions (via the
subversion, apache and finally mod_ssl lits).
There is a 15 second ish delay whenever a client connects using https,
15 seconds sounds to *me* like a DNS related timeout.
