对cURL SSL PUT / POST（php）的延迟响应（NSS与OpenSSL）

Question

I have two Fedora-based apache webservers making the same SSL PUT/POST calls with php/cURL. One works fine, but with the other the call succeeds but takes a VERY long time to return a response (~10 min). (GETs don't seem affected)

The working server's cURL uses OpenSSL for SSL, while the non-working version uses a later version of cURL that uses NSS for SSL

I know nothing about SSL implementations or their effect on cURL. What would cause such a significant delay in SSL PUT/POST responses?

Any suggestions appreciated- Thanks--

Answer 1

Have you check your KeepAlive options in httpd.conf, it should be On. Please refer to http://www.debian-administration.org/articles/188

Answer 2

我只能猜测，但是某些SSL实现最终会尝试执行不必要的反向DNS查找，而这可能需要很长时间才能超时。

Answer 3

Yes, i would bet on a DNS issue along the lines.

Try run a trace route from root and get some connection figures.

Do it on both machines so you can see where there issues is first showing up in the Debug.

Answer 4

I don't know the answer. DNS recommendations are always good. Other ideas include MTU discovery, server not providing intermediate certs so the clients may be trying to download missing intermediaries or an attempt to check the CAs recovation list.

Download wireshark and you should be able to get a better idea of the difference in behavior between clients.