NT8.09 - SSL problem

[Robert Iliuta]

Hallo,


I have NT8.09 and C9.
Upgrade my app from NT6 to NT8 and now I have some problems with SSL connections. Open app from my develop computer and works ok. Open from another computer will stay 1 min to open login page and then get some java script errors...and stop working.
Disable the SSL app will open ok from all computers. Enable SSL wil get above effect.
Antivirus/firewall disabled.

What could be?

Example Basic SSL works ok.


Thank you for any suggestions,
Robert

[Bruce]

did you read this;
http://www.capesoft.com/docs/NetTalk8/NetTalkWebSecure.htm#Troubleshooting

cheers
Bruce

[Robert Iliuta]

yes I read...
I do some tests but nothing changed...what should I do? or what to test...?
I test all of this:

NET:SSLMethodSSLv23    ! Default (Version 5.30 and earlier)  - TLSv1, SSLv2, SSLv3
NET:SSLMethodSSLv2   
NET:SSLMethodSSLv3     ! Update: Default from versions 5.31 and later
NET:SSLMethodTLSv1 

also

ThisWebServer.SSLCertificateOptions.CiphersAllowed = 'ALL:!ADH:RC4+RSA:+HIGH:!MEDIUM:!LOW:!SSLv2:!EXPORT'

and

ThisWebServer.SSLCertificateOptions.CiphersAllowed = 'ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:!LOW:!SSLv2:!EXPORT'

but nothing changed...do I miss something?

I never got problems with SSL in NT6 but maybe more changed in NT7 and NT8


Please let me know what I have to do or test to make work.

Thank you,
Robert

[Bruce]

did you copy the new MSVCR DLL to the app folder?

cheers
Bruce

[Robert Iliuta]

msvcr90.dll this one? yes it's on the app folder.

Robert

[Bruce]

ok, well given that the Basic example works, I'm not sure what to suggest. You could turn on logging, and run it through Debugview, and see if it gives you any "hints", but without an example it's impossible to determine what you might have done wrong.

cheers
Bruce

[Robert Iliuta]

I found the problem! I think it's a bug in NT8...
See attached images where with some settings works and with some not. Also duplicate on example.
But this is only with SSL connections. Also found some strange things when I play with options: Auto-check cached files and No JavaScript Check . Found that pages made a refresh an every request and I see also the java script error on the top of the page. Uncheck this options everything is fast and works ok. Also maybe some other of this combinations on Performance tab will break the web server to work normally....

Workaround - I will leave the Enable File Cache checked.

Please let me know if you can duplicate this. Also if anyone with SSL could test and confirm this I will appreciate.

Thank you,
Robert

[attachment deleted by admin]

[Bruce]

Hi Robert,

Thank you. That specific combination was very helpful because I was able to duplicate it here, and I think has fixed a long-standing bug in the cache which occasionally caused the server/browser connection to "hiccup".

I am doing a 8.10 build immediately to get the fix out there, but if anyone has problems with any specific combinations of these settings please let me know.

cheers
Bruce

[Robert Iliuta]

Thank you Bruce for quick fix! ....it took me a lot to find that combination but happy now to find it....my focus was on SSL..
Good luck!
Robert