Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I keep seeing this in my apache 2.2.22 (Ubuntu) log files and don't know why it is occurring or how to fix it

[debug] ssl_engine_kernel.c(1884): OpenSSL: Write: SSL negotiation finished successfully
[info] [client] Connection closed to child 3 with standard shutdown (server
[info] [client] (70007)The timeout specified has expired: SSL input filter read failed.

I've seen this already: Apache Proxy TimeOut

I've tried a2dismod reqtimeout_module and these options as well:

    SetEnv proxy-sendchunks
    SetEnv force-proxy-request-1.0 1
    SetEnv proxy-nokeepalive 1
    ProxyPass            /  connectiontimeout=300 timeout=300

Apache Info:

#  apachectl -V; apachectl -M
Server version: Apache/2.2.22 (Ubuntu)
Server built:   Jul 12 2013 13:37:10
Server's Module Magic Number: 20051115:30
Server loaded:  APR 1.4.6, APR-Util 1.3.12
Compiled using: APR 1.4.6, APR-Util 1.3.12
Architecture:   64-bit
Server MPM:     Prefork
  threaded:     no
    forked:     yes (variable process count)
Server compiled with....
 -D APACHE_MPM_DIR="server/mpm/prefork"
 -D APR_HAVE_IPV6 (IPv4-mapped addresses enabled)
 -D HTTPD_ROOT="/etc/apache2"
 -D SUEXEC_BIN="/usr/lib/apache2/suexec"
 -D DEFAULT_PIDLOG="/var/run/"
 -D DEFAULT_SCOREBOARD="logs/apache_runtime_status"
 -D DEFAULT_LOCKFILE="/var/run/apache2/accept.lock"
 -D DEFAULT_ERRORLOG="logs/error_log"
 -D AP_TYPES_CONFIG_FILE="mime.types"
 -D SERVER_CONFIG_FILE="apache2.conf"
Loaded Modules:
 core_module (static)
 log_config_module (static)
 logio_module (static)
 mpm_prefork_module (static)
 http_module (static)
 so_module (static)
 alias_module (shared)
 auth_basic_module (shared)
 authn_file_module (shared)
 authz_default_module (shared)
 authz_groupfile_module (shared)
 authz_host_module (shared)
 authz_user_module (shared)
 autoindex_module (shared)
 cgi_module (shared)
 deflate_module (shared)
 dir_module (shared)
 env_module (shared)
 headers_module (shared)
 mime_module (shared)
 negotiation_module (shared)
 proxy_module (shared)
 proxy_http_module (shared)
 reqtimeout_module (shared)
 rewrite_module (shared)
 security2_module (shared)
 setenvif_module (shared)
 ssl_module (shared)
 status_module (shared)
 unique_id_module (shared)
Syntax OK

# cat /etc/apache2/sites-available/scl/
<Virtualhost *:80>
        Redirect /
<VirtualHost *:443>
        SSLEngine on
        SSLProxyEngine On
        ProxyRequests Off
        LogLevel Debug
        DocumentRoot "/var/www/html/scl/trail"
        ErrorLog "/var/log/apache2/trail-error_log"
        CustomLog "/var/log/apache2/trail-error_log" common
        DirectoryIndex index.html index.htm
        <Directory /var/www/html/scl/trail>
        Order deny,allow
        Allow from all
        SetHandler default-handler

        ProxyPass            /  connectiontimeout=300 timeout=300
        ProxyPassReverse     /

        ProxyPreserveHost On

        # SSL Constraints #

        SSLProtocol -ALL +SSLv3 +TLSv1

        # Choose cipher suites
        SSLHonorCipherOrder On

        # SameOrigin The page can only be displayed in a frame on the same origin as the page itself
        Header set X-Frame-Options SAMEORIGIN

        SSLCertificateFile     /etc/apache2/
        SSLCertificateKeyFile  /etc/apache2/
        SSLCertificateChainFile /etc/apache2/gd_bundle.crt
        SetOutputFilter INFLATE;proxy-html;DEFLATE
share|improve this question
Why do you use SSL for backend connections? You can't trust your local network? – Tometzky Sep 18 '13 at 15:57
The connection goes to an API gateway that receives calls on HTTPS – brakertech Sep 18 '13 at 16:29

For whatever reason this fixed it

    SetEnv nokeepalive ssl-unclean-shutdown
share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.