SSF over SSL

[visualwritings]

Hi,

We have an application running on a Windows machine with an SSF client installed. The idea is that the application is reachable using an SSF server. We've configured this successfully, however the connection from our webportal to the SSF server (which then reroutes to said application) is regular http traffic, which we would like to have over SSL. I didn't find an option to load a SSL certificate on the SSF server for outside connections, so for now I've put a NginX proxy on the same server the SSFD is running on, basically doing some SSL offloading.

The problem I'm now running into is that intermittently (averaging at around every 3 seconds) the connection is dropped, resulting in an error on NginX (upstream prematurely closed connection while reading upstream) and the webportal throwing a resulting error (ERR_CONTENT_LENGTH_MISMATCH).

Any suggestions on how to solve either the errors in NginX or a better more stable way to make the connection between the webportal and the SSF server over SSL?

Cheers, Martijn

[visualwritings]

In the meantime we progressed a little in the search for the cause of our issue. We basically eliminated the SSL offloading as the software on the windows machine now handles the SSL bit. However, regardless of SSL or not we are still getting the ERR_CONTENT_LENGTH_MISMATCH errors, although less frequent than when we we're using SSL offloading.

So the errors seem to be originating from SSF, since we have a number of the same kind of windows machines which don't use SSF where this isn't an issue. Any thoughts on this?

[visualwritings]

Even more specific, when the ERR_CONTENT_LENGTH_MISMATCH occurs, it fails at 286 bytes (roughly, sometimes a byte more or less).