Yaws + SSL in non Win32 OS

Inswitch Solutions <>
Thu Jun 16 20:17:48 CEST 2005


Hi Peter,

I've three more patches which I've been asking about to Ericsson support, but without any feedback from them.
The following happens on Win32 + Yaws web server with latest patches and SSL enabled + otp_LXA_11930_win32_R10B.exe (licensed) :

1) FD requests growing and never been released from the FD set (memory consumed).
static void close_and_remove_connection(Connection *cp) 
{
+ FD_CLR(cp->fd, &readmask);     // release read FD
+ FD_CLR(cp->fd, &writemask);    // release write FD
+ FD_CLR(cp->fd, &exceptmask);  // release exceptions FD

 safe_close(cp->fd);
 remove_connection(cp);
}

2) When a client disconnects the read function fails with SSL_ERROR_SYSCALL and the port starts looping endlessly over the same internal state (CPU 100%).
Try OpenSSL "s_client -connect localhost:443 -prexit" with a local Yaws web server and then exit from the console opened and also happens when browsing web pages.

I have modified line 1077 of esock.c with:
+   } else { //if (cc == 0) {  

3) Form upload for more than 120kb fails (http://yaws.hyber.org/upload0.yaws used)
I have increased
+ #define RWBUFLEN       (120*1024)


This is the only way I've found to solve the above issues and I'd like to share this knowledge with the Erlang list.
May be there are some other approaches.


regards,  Eduardo Figoli


     Prepaid Expertise - Programmable Switches 
      Powered by Ericsson Licensed Technology
      Eng. Eduardo Figoli - Development Center - IN Switch Solutions Inc.
      Headquarters - Miami-U.S.A. Tel: 1305-3578076 Fax: 1305-7686260
      Development Center - Montevideo - Uruguay Tel/Fax: 5982-7104457
      e-mail: 

     



----- Original Message ----- 
From: "Peter H|gfeldt" <>
To: <>
Cc: <>
Sent: Thursday, June 16, 2005 1:32 PM
Subject: Re: Yaws + SSL in non Win32 OS


> 
> I didn't realise the importance of this patch. It will be included
> in a bauta-patch to our paying customers, and in the opensource 
> release in the beginning of next week.
> 
> /Peter
> 
> On Tue, 7 Jun 2005  wrote:
> 
> > On Mon, Jun 06, 2005 at 04:23:40PM -0300, Inswitch Solutions wrote:
> > > Hi Klacke,
> > > 
> > > I can't find the patch you mention, please could you give the URL to
> > > download it?
> > > 
> > 
> > 
> > 
> > 
> > 
> > --- esock.c~    2004-09-14 14:02:44.000000000 +0200
> > +++ esock.c     2005-04-07 11:25:43.068624336 +0200
> > @@ -138,7 +138,7 @@
> >  #define MAJOR_VERSION   2
> >  #define MINOR_VERSION   0
> >  #define MAXREPLYBUF    256
> > -#define RWBUFLEN       4096
> > +#define RWBUFLEN       (32*1024)
> >  #define IS_CLIENT       0
> >  #define IS_SERVER       1
> >  #define SELECT_TIMEOUT  2      /* seconds */
> > 
> > 
> > 
> > 
> > /klacke
> > 
> > 
> > -- 
> > Claes Wikstrom                        -- Caps lock is nowhere and
> > http://www.hyber.org                  -- everything is under control          
> > 
> 
> 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://erlang.org/pipermail/erlang-questions/attachments/20050616/be625256/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.gif
Type: image/gif
Size: 1429 bytes
Desc: not available
URL: <http://erlang.org/pipermail/erlang-questions/attachments/20050616/be625256/attachment.gif>


More information about the erlang-questions mailing list