tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Francis Galiegue" <>
Subject "This page contains secure and non secure elements" (was "mod_jk : "connection aborted or network problems", but apache and tomcat are on the same machine??")
Date Mon, 08 May 2006 19:44:57 GMT
OK, I have some more information...

The whole webapp is served through mod_ssl, as such (in the webapp
specific config file):

        SSLEngine on
        SSLProtocol all -SSLv2
        SSLCipherSuite ALL:!ADH:RC4+RSA:+HIGH:-MEDIUM:-SSLv2:-LOW:-eNULL
        SSLOptions +StdEnvVars +ExportCertData
        SSLCertificateKeyFile conf/ssl.key/one2team.key
        SSLCertificateFile conf/ssl.crt/one2team.crt

The dates of the messages in jk.log match precisely the moment where
users see a security popup (well, at least during work hours) warning
them that the page contains secure and non secure items. When they
choose to see the page anyway, IE says that "the page cannot be
loaded" (doh). Those same pages work fine the rest of the time.

But IE is not the only "culprit", since Firefox users also get the
warning and observe the same behaviour: ask to view the page anyway,
but it immediately fails to load - this time with a message saying
(translated from French, so very probably inaccurate) 'Timeout - The
server took too much time to respond'. Whenever you click Yes
immediately or 5 seconds later.

>From what I've read, this message can appear when an empty response is
sent back to the browser, even if this response is supposedly SSL (the
mod_ssl configuration looks fine AFAICT). I use konqueror myself, but
don't use the site regularly enough that I encountered this problem.

The question which I still didn't find an answer for is what mod_jk
actually calls the client...

Francis Galiegue,,,
One2team - 12bis rue de la Pierre Levée, 75011 Paris - 0143381980
"When it comes to performance, weight is everything" - Tiff Needell

To unsubscribe, e-mail:
For additional commands, e-mail:

View raw message