Re: SSL with http & https URL's

> I have a question regarding the SSL issue. I use kannel cvs v20031110 - SSL
> enabled. Generally works fine, but check this out:
> 1) I issue the URL
> http://kannel-server:13000/status.html from a client PC through Internet
> Explorer
> I get Page can not display in the IE window (which is correct) and
> ERROR:HTTP:unsuccessful SSL handshake for client xxx.xxx.xxx.xxx (also
> correct)
> 2) I then issue the URL
>  https://kannel-server:13000/status.html
> everything works fine (I get the status window with all info included)
> 3) I issue again the URL (in the same IE window)
> http://kannel-server:13000/status.html and I still get the status window
> with the appropriate info.
> 
> So the thing is that the connection between the particular IE window and
> kannel is kept alive, and kannel accepts http request as https.
> 
> I had a look on http.c source code and found the following lines
> /* comment this out if you don't want Keep-Alive HTTP requests */
> #define USE_KEEPALIVE 1
> 
> I thought that commenting out the above line should solve this issue, but
> .... no luck
> 
> The HTTPclient is destroyed after a minute and the questions are:
> 
> a) What shall I change to decrease this timeout ?
> b) Do you thing there will be a problem if this timer is very small ? (e.g.
> 1 second)
> 
> Thanks in advance

I don't thing that Kannel will allow plain text requests via the SSL
connection. This is generally encapsulated already within the openssl
library code.

I do thing that IE is associating the hostname:port pair after the
first successfull SSL handshake internally and then resends an https
request instead of http, even while you enter it, because of the open
keep-alive session.

So actually it's the IE that fakes you in displaying http:// instead
of https://.

You could test this and ensure that I'm right or wrong by using
Etherreal (a network sniffer) to view the TCP connection data flow.

Stipe

mailto:[email protected]
-------------------------------------------------------------------
Wapme Systems AG

Münsterstr. 248
40470 Düsseldorf, NRW, Germany

phone: +49.211.74845.0
fax: +49.211.74845.299

mailto:[email protected]
http://www.wapme-systems.de/
-------------------------------------------------------------------

-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v1.2.2 (Cygwin)
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=aYCI
-----END PGP PUBLIC KEY BLOCK-----