Welcome! Log In Create A New Profile

Advanced

Re: Bad Decompression error after default ssl_session_timeout

Maxim Dounin
May 23, 2012 04:26AM
Hello!

On Wed, May 23, 2012 at 03:03:33AM -0400, lima wrote:

> Thanks for the reply.
>
> The first solution has solved the problem!! unfortunately we cannot make
> proxy_ssl_session_reuse off, as it may affect the performance. And the
> second option given by you is also cannot be done as the system team has
> some concern over it. The Openssl version we are using is the latest one
> supported by the CentOS version we are using.
>
> Is it possible to configure/compile nginx without zlib support?

This isn't about nginx and zlib support, it's about OpenSSL and
zlib support.

The zlib support in the OpenSSL version you are using is known to
have problems, and it can't be switched off dynamically as the
SSL_OP_NO_COMPRESSION option appeared only in OpenSSL 1.0.0.

Another workaround you may try is to force SSLv2 between nginx and
backend servers (by using appropriate settings on backends), it
should eliminate compression as it's not supported in SSLv2
protocol.

You may also try compiling nginx statically with newer version of
OpenSSL (or the same one, but without zlib support) by using
../configure --with-openssl=..., it might help as well.

> Again, is the gzip module creating problem here? We tried with gzip on
> and off but still it was giving the same problem.

No, gzip module is completely unrelated.

Maxim Dounin

_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx
Subject Author Posted

Bad Decompression error after default ssl_session_timeout

lima May 22, 2012 03:15AM

Re: Bad Decompression error after default ssl_session_timeout

Maxim Dounin May 22, 2012 01:28PM

Re: Bad Decompression error after default ssl_session_timeout

lima May 23, 2012 03:03AM

Re: Bad Decompression error after default ssl_session_timeout

Maxim Dounin May 23, 2012 04:26AM

Re: Bad Decompression error after default ssl_session_timeout

Igor Sysoev May 23, 2012 05:02AM

Re: Bad Decompression error after default ssl_session_timeout

lima May 23, 2012 05:49AM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 52
Record Number of Users: 6 on February 13, 2018
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready