I've got an issue going on where any Post operation on the web server takes over a minute to come back with data when using the site over TLS/https. For example, the new user form and the post new message button and forms all exhibit this behavior. Using the site with plain old http works great - no delays on post operations/form submissions.

If it matters, I'm using a LetsEncrypt certificate that all of my browsers have no issue with. The issue mentioned above persists regardless of browser (I tried Chrome, Firefox, and Edge).

Running CVS version of Synchronet on Debian 9 and installed my certificates using the Letsyncrypt.js script.

Thanks!
Chris

---
� Synchronet � The Computer Express - telnet://bbs.costakis.org

Re: TLS and Synchronet Web Server
By: Purduecoz to All on Tue Sep 04 2018 12:28 pm

I've got an issue going on where any Post operation on the web server takes over a minute to come back with data when using the site over TLS/https.
For example, the new user form and the post new message button and forms all exhibit this behavior. Using the site with plain old http works great - no delays on post operations/form submissions.

Okay, I'll try to repro and root-cause.

digital man

This Is Spinal Tap quote #4:
David St. Hubbins: He died in a bizarre gardening accident...
Norco, CA WX: 81.0�F, 61.0% humidity, 8 mph NE wind, 0.00 inches rain/24hrs

---
� Synchronet � Vertrauen � Home of Synchronet � [vert/cvs/bbs].synchro.net

Re: TLS and Synchronet Web Server
By: Digital Man to Purduecoz on Tue Sep 04 2018 12:50 pm

Okay, I'll try to repro and root-cause.

Much appreciated. Please let me know if there's anything additional I can provide to help.

Chris

---
� Synchronet � Vertrauen � Home of Synchronet � [vert/cvs/bbs].synchro.net

Digital wrote:

Re: TLS and Synchronet Web Server
By: Purduecoz to All on Tue Sep 04 2018 12:28 pm

I've got an issue going on where any Post operation on the web server takes
over a minute to come back with data when using the site over TLS/https.
For example, the new user form and the post new message button and forms all
exhibit this behavior. Using the site with plain old http works great - no
delays on post operations/form submissions.

Okay, I'll try to repro and root-cause.

digital man

Similar issue here actually but I've not really had time to deal with it.
When you log in to the BBS on the https:// website it takes an age. Check
out https://www.endofthelinebbs.com

---
� Synchronet � End Of The Line BBS - endofthelinebbs.com

From Newsgroup: alt.bbs.synchronet

Nelgin wrote on 9/4/2018 7:02 PM:

To: Digital Man
Digital wrote:

Re: TLS and Synchronet Web Server
By: Purduecoz to All on Tue Sep 04 2018 12:28 pm

>> I've got an issue going on where any Post operation on the web server takes
>> over a minute to come back with data when using the site over TLS/https.
>> For example, the new user form and the post new message button and forms all
>> exhibit this behavior. Using the site with plain old http works great - no
>> delays on post operations/form submissions.

Okay, I'll try to repro and root-cause.

digital man

Similar issue here actually but I've not really had time to deal with it. When you log in to the BBS on the https:// website it takes an age. Check
out https://www.endofthelinebbs.com

Login was fast....

--- Synchronet 3.17a-Win32 NewsLink 1.110
� Synchronet � Vertrauen � Home of Synchronet � [vert/cvs/bbs].synchro.net

Al wrote:

Similar issue here actually but I've not really had time to deal with it.
When you log in to the BBS on the https:// website it takes an age. Check
out https://www.endofthelinebbs.com

Login was fast....

Using https? What browser are you using?

---
� Synchronet � End Of The Line BBS - endofthelinebbs.com

Digital wrote:

Similar issue here actually but I've not really had time to deal with it. When you log in to the BBS on the https:// website it takes an age. Check
out https://www.endofthelinebbs.com

---
� Synchronet � End Of The Line BBS - endofthelinebbs.com

Currently I cannot log in at all over HTTPS, it is as if the logon button is disabled.

Clifra Jones
Sysop, Days of Old BBS
Hostname: daysofoldbbs.wilhartsolutions.com
Protocols: Telnet, SSH (2222), HTTP

---
� Synchronet � Days of Old BBS Telnet/SSH(2222)/Web daysofoldbbs.wilhartsolutions.com

Re: Re: TLS and Synchronet Web Server
By: Clifra Jones to Nelgin on Wed Sep 05 2018 13:51:02

Currently I cannot log in at all over HTTPS, it is as if the logon button is disabled.

I just registered an account and logged into your system, both via the website and HTTPS. No slowness observed.

Is this problem consistent for you? Any difference when accessing your site externally vs. over the local network? (Can't imagine why it would affect HTTPS only.)

---
echicken
electronic chicken bbs - bbs.electronicchicken.com - 416-273-7230
� Synchronet � electronic chicken bbs - bbs.electronicchicken.com

Clifra wrote:

Digital wrote:

Similar issue here actually but I've not really had time to deal with it.
When you log in to the BBS on the https:// website it takes an age. Check
out https://www.endofthelinebbs.com

---
� Synchronet � End Of The Line BBS - endofthelinebbs.com

Currently I cannot log in at all over HTTPS, it is as if the logon button is disabled.

https://daysofoldbbs.wilhartsolutions.com/ ?

I registered and account and then was able to log right in. Have you used
the browser debugger to see if there's anything reported?

---
� Synchronet � End Of The Line BBS - endofthelinebbs.com

Re: Re: TLS and Synchronet Web Server
By: Nelgin to Al Lawrence on Wed Sep 05 2018 11:05 am

Al wrote:

Similar issue here actually but I've not really had time to deal with it. >> When you log in to the BBS on the https:// website it takes an age. Check >> out https://www.endofthelinebbs.com

Login was fast....

Using https? What browser are you using?

the telnet app isnt working on that website
have you tried using the wizard and using the proxy? http://eob-bbs.com/tmp/eotl.html
---
� Synchronet � ::: BBSES.info - free BBS services :::

Re: Re: TLS and Synchronet Web Server
By: Nelgin to Clifra Jones on Wed Sep 05 2018 02:01 pm

Clifra wrote:

Digital wrote:

Similar issue here actually but I've not really had time to deal with it. When you log in to the BBS on the https:// website it takes an age. Check out https://www.endofthelinebbs.com

---
� Synchronet � End Of The Line BBS - endofthelinebbs.com

Currently I cannot log in at all over HTTPS, it is as if the logon button is disabled.

https://daysofoldbbs.wilhartsolutions.com/ ?

I registered and account and then was able to log right in. Have you used the browser debugger to see if there's anything reported?

Occurring on mutiple computers. Tried Chrome and Firefox. Maybe something in my account. I will have to look into it.

Clifra Jones
Sysop, Days of Old BBS
Hostname: daysofoldbbs.wilhartsolutions.com
Protocols: Telnet, SSH (2222), HTTP

Clifra Jones

---
� Synchronet � Days of Old BBS Telnet/SSH(2222)/Web daysofoldbbs.wilhartsolutions.com

Re: Re: TLS and Synchronet Web Server
By: Clifra Jones to Nelgin on Thu Sep 06 2018 11:52 am

Re: Re: TLS and Synchronet Web Server
By: Nelgin to Clifra Jones on Wed Sep 05 2018 02:01 pm

Clifra wrote:

Digital wrote:

Similar issue here actually but I've not really had time to deal
with it. When you log in to the BBS on the https:// website it
takes an age. Check out https://www.endofthelinebbs.com

---
� Synchronet � End Of The Line BBS - endofthelinebbs.com

Currently I cannot log in at all over HTTPS, it is as if the logon button is disabled.

https://daysofoldbbs.wilhartsolutions.com/ ?

I registered and account and then was able to log right in. Have you
used the browser debugger to see if there's anything reported?

Occurring on mutiple computers. Tried Chrome and Firefox. Maybe something in account. I will have to look in it.

It will log in after a long wait. Tried it even on w3m on the server itself and still taking a long time.

I will re-test at home. Work is not a good pace to do this.

Clifra
Clifra Jones
Sysop, Days of Old BBS
Hostname: daysofoldbbs.wilhartsolutions.com
Protocols: Telnet, SSH (2222), HTTP

---
� Synchronet � Days of Old BBS Telnet/SSH(2222)/Web daysofoldbbs.wilhartsolutions.com

MRO wrote:

Re: Re: TLS and Synchronet Web Server
By: Nelgin to Al Lawrence on Wed Sep 05 2018 11:05 am

Al wrote:

Similar issue here actually but I've not really had time to deal with it.
When you log in to the BBS on the https:// website it takes an age. Check
out https://www.endofthelinebbs.com

Login was fast....

Using https? What browser are you using?

the telnet app isnt working on that website
have you tried using the wizard and using the proxy? http://eob-bbs.com/tmp/eotl.html

Telnet is working just fine for me.

Which browser are you using?

---
� Synchronet � End Of The Line BBS - endofthelinebbs.com

Clifra wrote:

It will log in after a long wait. Tried it even on w3m on the server itself and
still taking a long time.

I will re-test at home. Work is not a good pace to do this.

That's odd...similar issue. Takes long for me to login but everyone else
seems to log in quicky enough. I wonder if it's anything to do with the
sysop password request. I'll create a new account and see.

---
� Synchronet � End Of The Line BBS - endofthelinebbs.com

Re: Re: TLS and Synchronet Web Server
By: Nelgin to Clifra on Thu Sep 06 2018 14:18:54

That's odd...similar issue. Takes long for me to login but everyone else seems to log in quicky enough. I wonder if it's anything to do with the sysop password request. I'll create a new account and see.

That web UI does not currently prompt for the sysop password (unless I've forgotten adding that in), so that should have nothing to do with it.

I've debated adding in a system password prompt but can't decide if it's wanted/necessary even as an option.

---
echicken
electronic chicken bbs - bbs.electronicchicken.com - 416-273-7230
� Synchronet � electronic chicken bbs - bbs.electronicchicken.com

Re: Re: TLS and Synchronet Web Server
By: echicken to Nelgin on Thu Sep 06 2018 03:45 pm

That web UI does not currently prompt for the sysop password (unless I've forgotten adding that in), so that should have nothing to do with it.

I've debated adding in a system password prompt but can't decide if it's wanted/necessary even as an option.

Yeah, I'm not sure if there is anything that only a sysop can do from the web side.

Nightfox

---
� Synchronet � Digital Distortion: digitaldistortionbbs.com

Re: Re: TLS and Synchronet Web Server
By: Nightfox to echicken on Thu Sep 06 2018 13:39:17

Yeah, I'm not sure if there is anything that only a sysop can do from the web side.

I think there are some controls in the forum area that are only available to sysops (or maybe users with certain rights in a given sub). That's about it.

---
echicken
electronic chicken bbs - bbs.electronicchicken.com - 416-273-7230
� Synchronet � electronic chicken bbs - bbs.electronicchicken.com

Re: Re: TLS and Synchronet Web Server
By: Nelgin to MRO on Thu Sep 06 2018 02:17 pm

Telnet is working just fine for me.

Which browser are you using?

it works today. you must have had whatever redirects it down.
---
� Synchronet � ::: BBSES.info - free BBS services :::

Re: Re: TLS and Synchronet Web Server
By: Clifra Jones to Nelgin on Thu Sep 06 2018 11:52 am

It will log in after a long wait. Tried it even on w3m on the server itself and still taking a long time.

I will re-test at home. Work is not a good pace to do this.

Clifra
Clifra Jones
Sysop, Days of Old BBS
Hostname: daysofoldbbs.wilhartsolutions.com
Protocols: Telnet, SSH (2222), HTTP

I still cannot figure this out. eChicken I even logged in as your account here got same result. This is on mutiple computers on different networks. I monitores the service just now while logging on here is the result.

Sep 08 14:19:32 DOOBBSu synchronet[16997]: web 0062 Request: POST /api/auth.ssjs HTTP/1.1
Sep 08 14:20:02 DOOBBSu synchronet[16997]: web 0063 HTTPS connection accepted from: 73.104.162.47 port 60320
Sep 08 14:20:02 DOOBBSu synchronet[16997]: web 0063 Request: GET /api/system.ssjs?call=node-list HTTP/1.1
Sep 08 14:20:02 DOOBBSu synchronet[16997]: web 0063 Sending file: /sbbs/temp/SBBS_SSJS.16997.63.html (0 bytes)
Sep 08 14:20:08 DOOBBSu synchronet[16997]: web 0063 Session thread terminated (1 clients, 5 threads remain, 13 served)
Sep 08 14:21:02 DOOBBSu synchronet[16997]: web 0063 HTTPS connection accepted from: 73.104.162.47 port 60341
Sep 08 14:21:02 DOOBBSu synchronet[16997]: web 0063 Request: GET /api/system.ssjs?call=node-list HTTP/1.1
Sep 08 14:21:02 DOOBBSu synchronet[16997]: web 0063 Sending file: /sbbs/temp/SBBS_SSJS.16997.63.html (0 bytes)
Sep 08 14:21:08 DOOBBSu synchronet[16997]: web 0063 Session thread terminated (1 clients, 5 threads remain, 14 served)
Sep 08 14:21:32 DOOBBSu synchronet[16997]: web 0062 Sending file: /sbbs/temp/SBBS_SSJS.16997.62.html (0 bytes)
Sep 08 14:21:32 DOOBBSu synchronet[16997]: web 0062 HTTPS connection accepted from: 73.104.162.47 port 60383
Sep 08 14:21:33 DOOBBSu synchronet[16997]: web 0062 Request: GET / HTTP/1.1 Sep 08 14:21:33 DOOBBSu synchronet[16997]: web 0062 Sending file: /sbbs/temp/SBBS_SSJS.16997.62.html (0 bytes)
Sep 08 14:21:33 DOOBBSu synchronet[16997]: web 0062 Session thread terminated (1 clients, 5 threads remain, 15 served)
Sep 08 14:21:34 DOOBBSu synchronet[16997]: web 0062 HTTPS connection accepted from: 73.104.162.47 port 60386
Sep 08 14:21:34 DOOBBSu synchronet[16997]: web 0063 HTTPS connection accepted from: 73.104.162.47 port 60389
Sep 08 14:21:34 DOOBBSu synchronet[16997]: web 0064 HTTPS connection accepted from: 73.104.162.47 port 60390
Sep 08 14:21:34 DOOBBSu synchronet[16997]: web 0062 Request: GET /api/system.ssjs?call=node-list HTTP/1.1
Sep 08 14:21:34 DOOBBSu synchronet[16997]: web 0062 Sending file: /sbbs/temp/SBBS_SSJS.16997.62.html (0 bytes)


So from the time I logged in at 14:19:32 the page finally loaded at 14:21:34, a full 3 seconds but ir feels longer that that. (3 seconds on the web is like 3 minutes) . It was a full 30 seconds before the auth is accepted and responded to.

HTTP is instantaneous!

Clifra Jones
Sysop, Days of Old BBS
Hostname: daysofoldbbs.wilhartsolutions.com
Protocols: Telnet, SSH (2222), HTTP

---
� Synchronet � Days of Old BBS Telnet/SSH(2222)/Web daysofoldbbs.wilhartsolutions.com

Re: Re: TLS and Synchronet Web Server
By: Nelgin to Clifra on Thu Sep 06 2018 14:18:54

That web UI does not currently prompt for the sysop password (unless I've forgotten adding that in), so that should have nothing to do with it.

I've debated adding in a system password prompt but can't decide if it's wanted/necessary even as an option.

---
echicken
electronic chicken bbs - bbs.electronicchicken.com - 416-273-7230
� Synchronet � electronic chicken bbs - bbs.electronicchicken.com

IMO, sysop password is not required. Not unless you are planning to add some sysop only related functionality. Seeing as how we can do all that via telnet/ssh I don't think it is needed.

Clifra Jones
Sysop, Days of Old BBS
Hostname: daysofoldbbs.wilhartsolutions.com
Protocols: Telnet, SSH (2222), HTTP

---
� Synchronet � Days of Old BBS Telnet/SSH(2222)/Web daysofoldbbs.wilhartsolutions.com

IMO, sysop password is not required. Not unless you are planning to add some sysop only related functionality. Seeing as how we can do all that via telnet/ssh I don't think it is needed.

Clifra Jones
Sysop, Days of Old BBS
Hostname: daysofoldbbs.wilhartsolutions.com
Protocols: Telnet, SSH (2222), HTTP

Hey Chicken, here's an odd thing.
On the Webv4, post 1st message, page refreshes, scroll to bottom, message is there. Post seconf message, page refreshes, scroll to bottom, mesage not there. scroll to top, click Syncronet Discussions, page refreshes, scroll to bottom, message is there.

Just an FYI.

Clifra Jones
Sysop, Days of Old BBS
Hostname: daysofoldbbs.wilhartsolutions.com
Protocols: Telnet, SSH (2222), HTTP

---
� Synchronet � Days of Old BBS Telnet/SSH(2222)/Web daysofoldbbs.wilhartsolutions.com

Re: Re: TLS and Synchronet Web Server
By: Clifra to Clifra on Sat Sep 08 2018 02:30 pm

I still cannot figure this out. eChicken I even logged in as your account here got same result. This is on mutiple computers on different networks. I monitores the service just now while logging on here is the result.

There's probably nothing for you to figure out unless you want to get into profiling the source (websrvr.c) - most likely, there's a bug in the TLS support in the web server. I myself was able to reproduce a 60-second timeout (the duration of the configured inactivity timeout) upon posting a message over HTTPS. But I didn't write the relevant code nor understand all of the HTTPS/TLS related logic enough to see the problem and solution readily. Deuce (in #synchronet at irc.synchro.net) is the best person to fix this.

digital man

This Is Spinal Tap quote #35:
Jeanine Pettibone: You don't do heavy metal in Dubly, you know.
Norco, CA WX: 94.0�F, 36.0% humidity, 9 mph E wind, 0.00 inches rain/24hrs

---
� Synchronet � Vertrauen � Home of Synchronet � [vert/cvs/bbs].synchro.net

Re: Re: TLS and Synchronet Web Server
By: Clifra to Clifra on Sat Sep 08 2018 14:38:38

On the Webv4, post 1st message, page refreshes, scroll to bottom, message is there. Post seconf message, page refreshes, scroll to bottom, mesage not there. scroll to top, click Syncronet Discussions, page refreshes,

Thanks for letting me know. Should be an easy fix when I get to it.

---
echicken
electronic chicken bbs - bbs.electronicchicken.com - 416-273-7230
� Synchronet � electronic chicken bbs - bbs.electronicchicken.com

Re: Re: TLS and Synchronet Web Server
By: Digital Man to Clifra on Sat Sep 08 2018 01:01 pm

Re: Re: TLS and Synchronet Web Server
By: Clifra to Clifra on Sat Sep 08 2018 02:30 pm

I still cannot figure this out. eChicken I even logged in as your
account here got same result. This is on mutiple computers on different networks. I monitores the service just now while logging on here is the result.

There's probably nothing for you to figure out unless you want to get into profiling the source (websrvr.c) - most likely, there's a bug in the TLS support in the web server. I myself was able to reproduce a 60-second timeou (the duration of the configured inactivity timeout) upon posting a message o HTTPS. But I didn't write the relevant code nor understand all of the HTTPS/ related logic enough to see the problem and solution readily. Deuce (in #synchronet at irc.synchro.net) is the best person to fix this.

digital man

This Is Spinal Tap quote #35:
Jeanine Pettibone: You don't do heavy metal in Dubly, you know.
Norco, CA WX: 94.0�F, 36.0% humidity, 9 mph E wind, 0.00 inches rain/24hrs

Thanks Dman, I wait until Deuce gets a chance to look at this.

Clifra
Clifra Jones
Sysop, Days of Old BBS
Hostname: daysofoldbbs.wilhartsolutions.com
Protocols: Telnet, SSH (2222), HTTP

---
� Synchronet � Days of Old BBS Telnet/SSH(2222)/Web daysofoldbbs.wilhartsolutions.com