Cacti on top of SSLv3

[Jeff]

Hi guru,

I'm now running fine cacti .6.8 on top of apache 2.0.39, Openssl .9.6d and mysql 3.23.49.

The only strange things I have is the following :
When accessing Cacti on HTTP, everything is OK.
When accessing Caction on HTTPS/SSLv3, I can still view the updated graphs but I cannot view any graphs definitions, nor Data Input, nor Data Source.

Pages for those sections load normally but nothing is displayed. It is like if I have just installed cacti and deleted all the pre-installed data examples.
Accessing

Code: Select all

https://hostname/cacti/ds.php

doesn't display any user data (html template and images are ok)
I have tried accessing directly a datasource definition using

Code: Select all

https://hostname/cacti/ds.php?action=edit&id=390

and it works.


Any idea ?

Jeff

[raX]

What happens if you look at the HTML source of the page when it is not showing data? Does the source go with what you are seeing?

I doubt it could have anything to do with MySQL since the edit page renders ok. Also, what browser are you using to view cacti? Have you tried this under multiple browsers?

It could of course also be some Apache SSL setting conflicting with cacti. I have no real practicle experience with Apache/SSL though, so I don't know how much of a help I'd be there.

-Ian

[Jeff]

Well,

Using HTTP, the source page is full filled, and the file normally ends with a classic </BODY> tag.

Using HTTPS, the source seems to be incomplete. The last string is

Code: Select all

<td bgcolor="#E5E5E5" height="1">
<font color="#000000">Data Input Type</font>
</td>

This is the html code for the title of the second raw of the table displaying DS.
It seems that the entire html output did not reach my browser. I have had a few problem under Apache SSL for transfering large binary file, but never with html.

Will try to analyse apache log files.
If you have any idea, let me know.

Thank you

Jeff

[Jeff]

In the apache log files, the only difference between HTTP and HTTPS is that HTTP is using HTTP/1.0 and SSL is using HTTP/1.1. Don't know why...

Here is the log string for the HTTP :

Code: Select all

[20/Jun/2002:10:22:16 +0200] x.x.x.x - - "GET /cacti/ds.php HTTP/1.0" 200 10084

and here is the log string for HTTPS :

Code: Select all

[20/Jun/2002:10:23:35 +0200] x.x.x.x - - "GET /cacti/ds.php HTTP/1.1" 200 10084 SSLv3 RC4-MD5

As you can see, Apache claims to send the same quantity of data to the client (10084 Bytes). Maybe I should try with a different browser...

[Jeff]

The problem is not a cacti nor apache problem.

The problem is a known bug from microsoft, located in the afd.sys file under XP.

More information at

Code: Select all

http://www.apache.org/dist/httpd/binaries/win32/#xpbug

Got the fix from Microsoft and now it's ok.