[racket-dev] possible bug in openssl/mzssl

On Wed, 29 Feb 2012 09:20:54 -0700
Matthew Flatt <mflatt at cs.utah.edu> wrote:

> Neil and Timur: Thanks for detailed information about the problem.
> 
> So far, I haven't managed to replicate the problem on my machine. Do
> you have any hints on how to configure Apache to trigger the problem
> or a server that I might try?

you must access document in location, where SSLVerifyClient required:

  <Location /dir/>
    SSLRequireSSL
    SSLVerifyClient require
    SSLVerifyDepth 10
  </Location>

and do "GET /dir/some.file HTTP/1.0" to cause apache do connection
re-negotiation.

--
Sergey Pinaev <pinaev at jet.msk.su>