SSL Probleme

Lord_Icon

Lord_Icon

Member
Hi,

es geht um ein XTC Shop mit SSL.

Der Hauptaufruf erfolgt über http.
Sobal der Warenkorb oder Loginbereich betreten wird, erfolgt umschaltung auf https.

Das Problem:
Starte ich den Server neu kann ich keine Artikel mehr in den Warenkorb legen. Bzw. der Artikel bleibt nicht drin. Ein erneutes aufrufen des Warenkorbs zeigt einen leeren Warenkorb.

Anbei erstmal die error_log vom SSL.
Gegoogelt habe ich natürlich schon bzgl. des ersten Fehlers. Direkte Lösungsvorschläge waren aber nicht dabei.

Code: 
[Tue Aug 06 16:07:01 2013] [info] [client 83.149.24.174] (70007)The timeout specified has expired: SSL input filter read failed.
[Tue Aug 06 16:07:01 2013] [info] [client 83.149.24.174] Connection closed to child 25 with standard shutdown (server www.domain.de:443)
[Tue Aug 06 16:07:16 2013] [info] Loading certificate & private key of SSL-aware server
[Tue Aug 06 16:07:17 2013] [info] Configuring server for SSL protocol
[Tue Aug 06 16:07:17 2013] [info] Loading certificate & private key of SSL-aware server
[Tue Aug 06 16:07:17 2013] [info] Configuring server for SSL protocol
[Tue Aug 06 16:07:23 2013] [info] [client 83.149.24.174] Connection to child 6 established (server www.domain.de:443)
[Tue Aug 06 16:07:23 2013] [info] Seeding PRNG with 656 bytes of entropy
[Tue Aug 06 16:07:23 2013] [info] Initial (No.1) HTTPS request received for child 6 (server www.domain.de:443)
[Tue Aug 06 16:07:39 2013] [info] [client 83.149.24.174] (70007)The timeout specified has expired: SSL input filter read failed.
[Tue Aug 06 16:07:39 2013] [info] [client 83.149.24.174] Connection closed to child 6 with standard shutdown (server www.domain.de:443)
[Tue Aug 06 16:07:50 2013] [info] [client 83.149.24.174] Connection to child 9 established (server www.domain.de:443)
[Tue Aug 06 16:07:50 2013] [info] Seeding PRNG with 656 bytes of entropy
[Tue Aug 06 16:07:50 2013] [info] Initial (No.1) HTTPS request received for child 9 (server www.domain.de:443)
[Tue Aug 06 16:07:51 2013] [info] Subsequent (No.2) HTTPS request received for child 9 (server www.domain.de:443)
[Tue Aug 06 16:08:06 2013] [info] [client 83.149.24.174] (70007)The timeout specified has expired: SSL input filter read failed.
[Tue Aug 06 16:08:06 2013] [info] [client 83.149.24.174] Connection closed to child 9 with standard shutdown (server www.domain.de:443)

Mitunter klappt es wieder. Meist ist das Zeitabhängig.
Sprich: Warte ich eine gewisse Zeit klappt es wieder. Verkürzen kann ich es, indem ich den apachen neustarte.

Mitunter habe ich heute vvlt. eine Sofort-Lösung gefunden. Das wird sich aber erst später zeigen, wenn ich den Server mal wieder neu starten muß.
Aktuell fass ich den erstmal nicht an und versuche bessere Lösungen zu finden:

Code: 
/etc/init.d/apache2 start-htcacheclean                                               Starting htcacheclean:.
/etc/init.d/apache2 stop-htcacheclean                                               Stopping htcacheclean:.
/etc/init.d/apache2 force-reload

Hier nochmal die vhost:
Code: 
         <Directory "/var/www/htdocs/web14/html">

          Options +FollowSymLinks +SymLinksIfOwnerMatch

           <IfModule mod_access.c>
                Allow from all
           </IfModule>
         </Directory>

<VirtualHost 195.131.242.244:80>
 ServerName "domain.de"
 ServerAlias www.domain.de

 SuexecUserGroup web14 web14
 DocumentRoot "/var/www/htdocs/web14/html"
 ScriptAlias /cgi-bin/ /var/www/htdocs/web14/html/cgi-bin/
 <Files ~ "\.(wml.*|wbmp)$">
 deny from all
 </Files>

php_admin_value allow_call_time_pass_reference 1
php_admin_value error_reporting 1

php_admin_value suhosin.post.max_array_depth 0
php_admin_value suhosin.post.max_array_index_length 0
php_admin_value suhosin.post.max_vars 0
php_admin_value suhosin.request.max_array_depth 0
php_admin_value suhosin.request.max_array_index_length 0
php_admin_value suhosin.request.max_vars 0
php_admin_value suhosin.multiheader 1



 php_admin_flag safe_mode Off
 php_admin_value open_basedir /var/www/htdocs/web14
 php_admin_value session.save_path /var/www/htdocs/web14/temp
 php_admin_value upload_tmp_dir /var/www/htdocs/web14/temp
 php_admin_value safe_mode_exec_dir /var/www/htdocs/web14/temp
 php_admin_value sendmail_path "/usr/sbin/sendmail -t -i -f blablubb@gmx.de"
 php_admin_value mail.add_x_header 1
 php_admin_flag register_globals off
 CustomLog /root/vhost/logs/domain.de.log combined
</VirtualHost>

      <VirtualHost 195.131.242.244:443>
        SSLEngine on
        SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
        SSLCertificateFile /srv/www/htdocs/web14/ssl_zertifikat/www_domain_de.crt
        SSLCertificateKeyFile /srv/www/htdocs/web14/ssl_zertifikat/www_domain_de.key
        SSLCertificateChainFile /srv/www/htdocs/web14/ssl_zertifikat/intermediate.crt

        ServerName www.domain.de
        SSLOptions StrictRequire
        SSLProtocol all -SSLv3

        SetEnvIf User-Agent ".*MSIE.*" \
                 nokeepalive ssl-unclean-shutdown \
                 downgrade-1.0 force-response-1.0

LogLevel info
  ErrorLog    "|/usr/sbin/rotatelogs -l /srv/www/htdocs/web14/log/ssl_error_log.%Y-%m-%d 86400"
  TransferLog "|/usr/sbin/rotatelogs -l /srv/www/htdocs/web14/log/ssl_access_log.%Y-%m-%d 86400"


 SuexecUserGroup web14 web14
 DocumentRoot "/srv/www/htdocs/web14/html/"
 ScriptAlias /cgi-bin/ /srv/www/htdocs/web14/html/cgi-bin/
 <IfModule mod_python.c>
  <Files ~ "\.py$">
   AddHandler python-program .py
   PythonHandler mod_python.publisher
  </Files>
 </IfModule>

 <Files ~ "\.shtml$">
 deny from all
 </Files>


php_admin_value suhosin.post.max_array_depth 0
php_admin_value suhosin.post.max_array_index_length 0
php_admin_value suhosin.post.max_vars 0
php_admin_value suhosin.request.max_array_depth 0
php_admin_value suhosin.request.max_array_index_length 0
php_admin_value suhosin.request.max_vars 0
php_admin_value suhosin.multiheader 1

 php_admin_flag safe_mode Off
 php_admin_value open_basedir /srv/www/htdocs/web14/:/usr/share/php
 php_admin_value session.save_path /srv/www/htdocs/web14/temp
 php_admin_value upload_tmp_dir /srv/www/htdocs/web14/temp
 php_admin_value safe_mode_exec_dir /srv/www/htdocs/web14/temp
 php_admin_value sendmail_path "/usr/sbin/sendmail -t -i -f info@blablub.de"
 php_admin_flag register_globals off 

      </VirtualHost>


Kennt einer dieses Problem und kann Tipps geben wo ich weitersuchen könnte ?
 
You must log in or register to reply here.
Back
Top