Per my previous post on upload progress in Rails, I can now confirm:
- Mongrel upload progress works as long as you're not using --prefix to host the application under a subdirectory
- As Brad Ediger points out, Pound works really well as a load-balancer and SSL offload engine for Mongrel with upload progress.
- The packages in Ubuntu have a pretty fatal bug - Pound segfaults and dies on any connection.
- Due to an OpenSSL bug, the error SSL_CTX_use_certificate_chain_file failed - aborted" could refer to any error, such as "typed the path to the certificate wrong". Run pound inside strace to confirm.
- If you have a chained root SSL certificate, it's a pain the ass to get Pound to see it:
The certificates must be in PEM format and must be sorted starting with the subject's certificate (actual client or server certificate), followed by intermediate CA certificates if applicable, and ending at the highest level (root) CA.
Which means, cat site.cer chain.cer Equifax_Secure_Global_eBusiness_CA-1.cer site.key > site.pem.
I've backported Pound to Ubuntu Dapper, from Debian Testing. Dapper only has 1.0, which might work, but the configuration has changed beween 1.x and 2.x, which makes the examples incorrect.