WebSphere Application Server & Liberty

WebSphere Application Server & Liberty

Join this online group to communicate across IBM product users and experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  ssl timeout error

    Posted Wed April 10, 2013 02:41 AM

    HI GUYS,
    I AM FACING THE PROBLEM WITH TIMEOUTS IN HTTPD.CONF FILE WHILE CONFIGURING SSL. AND THE MESSAGE IN ERROR.LOG FILE IS AS FOLLOWS:



    Starting the IBM HTTP Server 7.0 service
    The IBM HTTP Server 7.0 service is running.
    _id: using ip addr 192.168.0.103
    [Tue Apr 09 23:39:57 2013] [info] mod_unique_id: using ip addr 192.168.0.103
    [Tue Apr 09 23:39:58 2013] [notice] Using config file C:/IHS7.016032013/IBM/HTTPServer/conf/httpd.conf
    [Tue Apr 09 23:39:58 2013] [notice] IBM_HTTP_Server/7.0.0.0 (Win32) configured -- resuming normal operations
    [Tue Apr 09 23:39:58 2013] [notice] Server built: Aug 6 2008 17:12:34
    [Tue Apr 09 23:39:58 2013] [notice] Parent: Created child process 6120
    [Tue Apr 09 23:39:58 2013] [debug] mpm_winnt.c(487): Parent: Sent the scoreboard to the child
    [Tue Apr 09 23:39:58 2013] [info] mod_unique_id: using ip addr 192.168.0.103
    [Tue Apr 09 23:39:59 2013] [info] mod_unique_id: using ip addr 192.168.0.103
    [Tue Apr 09 23:40:02 2013] [notice] Using GSKit version 7.0.4.17


    [Tue Apr 09 23:40:02 2013] [error] SSL0188E: SSL initialization for server: localhost, port: 83 failed, SSL Timeouts cannot be set in a virtualhost when SSLCacheDisable has not been specified globally
    Configuration Failed


    [Tue Apr 09 23:40:02 2013] [crit] (OS 6)The handle is invalid. : master_main: create child process failed. Exiting.
    [Tue Apr 09 23:40:32 2013] [notice] Parent: Forcing termination of child process 36
    [Tue Apr 09 23:40:32 2013] [info] removed PID file C:/IHS7.016032013/IBM/HTTPServer/logs/httpd.pid (pid=8608)



    later i had commented the ssltimeout and its working fine. bit this is not supposed to be done.  please help in resolving this 
            thank you. 



  • 2.  ssl timeout error

    Posted Wed April 10, 2013 05:21 AM
    Hi Kasi,

      You need to stablish SSLCacheDisable directive out of the virtualhost configuration then your SSLTimeouts will work.

      By default SSL Cache is enabled so if you stablish a SSL Timeout in a virtual host you are "broken" this directive.


      SSL0188E: SSL initialization for server: %s, port: %u failed. SSL timeouts cannot be set in a virtualhost when the SSLCacheDisable directive has not been specified globally.
     
     
      Reason: When the SSL session cache is being used, only the global timeout settings apply because they are managed by the external session cache daemon. See information about the SSLCacheDisable and SSLCacheEnable directives in the information center topic entitled SSL directives.

      Solution: If separate SSL timeouts are required, disable use of the session ID cache (SSLCacheDisable), otherwise make sure the SSLV3Timeout and SSLV2Timeout directives are only set in the global scope.

     
      Session ID cache
     
      IBM® HTTP Server caches secure sockets layer (SSL) session IDs when Web clients establish secure connections with the Web server. Cached session IDs enable subsequent SSL session requests to use a shortened SSL handshake during session establishment. Session ID caching is enabled by default on all supported platforms.
     
      In most cases, you will not need to take an additional configuration steps to effectively use SSL session ID caching in IBM HTTP Server.

      Hope this helps.
     
    regards


  • 3.  ssl timeout error

    Posted Wed April 10, 2013 06:49 AM
    Hi Gabriel , thanks for the post.

    also can u let me know how to

    1) set the directives  in the global scope
    2) disable ssl cache
                                                                    Thank you. 


  • 4.  ssl timeout error

    Posted Wed April 10, 2013 08:08 AM
    Kasi,

    You have two option:

      1.- Disable global SSLCache and put in virtualhost section SSL timeouts (more SSL granularity, more configuration)

      or
     
      2.- Put out of virtualhost section SSL timeouts (and not disable SSL cache) (less granularity, easy to configure)


    To disable SSL cache de directive is:

      SSLCacheDisable

    You need to put in http.conf out of any configuration section.

    Configuration Sections
    httpd.apache.org/docs/2.2/sections.html#...  
     

    In this link you have an example to configure SSL and to see sections
    pic.dhe.ibm.com/infocenter/wasinfo/v7r0/...



    Hope this helps.  Tell us if you need more support

    Regards



  • 5.  ssl timeout error

    Posted Wed April 10, 2013 10:18 AM
    Thank you Gabriel
                                   cheers.