httpd-wiki-changes mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Apache Wiki <wikidi...@apache.org>
Subject [Httpd Wiki] Update of "SSLSessionCache" by megaspaz
Date Tue, 22 Jan 2008 00:28:06 GMT
Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Httpd Wiki" for change notification.

The following page has been changed by megaspaz:
http://wiki.apache.org/httpd/SSLSessionCache

The comment on the change is:
Attempt to make generic, general, and not ubuntu specific.

------------------------------------------------------------------------------
  #format wiki
  #language en
  == SSLSessionCache ==
- I found the following error in the error.log file:
+ If the following error is encountered in the error.log file:
  
      [warn] Init: Session Cache is not configured [hint: SSLSessionCache]
  
- What follows is my attempt at correcting the problem:
+ This usually points to a distro breaking up SSL directives from the base SSL virtual host
configuration. The default SSL configuration shipped with apache.org's Apache package contains
these SSL configurations along with a base virtual host configuration.
  
- I am running Apache/2.2.3 (Ubuntu)  mod_ssl/2.2.3 
+ Make sure that your SSL configuration file gets loaded before your virtual host configuration
file and contains a line that looks like:
  
- I use the Ubuntu apache2 directory setup:     http://wiki.apache.org/httpd/DistrosDefaultLayout
+     SSLSessionCache        shmcb:/some/example/path/ssl_scache(512000)
  
- The following setting was in /etc/apache2/mods-available/ssl.conf:
+ For confirmation, use http://localhost/server-status to check the cache status.
  
+ Output should be similar to the following:
-     SSLSessionCache        shmcb:/var/run/apache2/ssl_scache(512000)
- 
- When I moved this to the /etc/apache2/apache2.conf near the bottom before the  statement
"Include /etc/apache2/sites-enabled/" the error message went away.
- 
- For confirmation I used http://localhost/server-status to check the cache status
- 
- It provided output similar to the following:
  
      SSL/TLS Session Cache Status: [[BR]] 
      cache type: SHMCB, shared memory: 512000 bytes, current sessions: 1[[BR]]
@@ -34, +28 @@

      total retrieves since starting: 1 hit, 1 miss[[BR]]
      total removes since starting: 0 hit, 0 miss[[BR]]
  
- When the SSLSessionCache statement was in the ssl.conf file I did not get any session cache
statistics on the server-status page.
+ If you do not get any session cache statistics on the server-status page then your SSL configuration
is not correctly set.
  
  To enable server-status, the following construct can be used in your Apache configuration
file:
  === Example ===

Mime
View raw message