Ok, I haven't figured out which of the following did it, but applying the following suggested changes to my config.tcl fixed the problem:
ns_param ServerProtocols "SSLv2" ns_param ServerCipherSuite "ALL:!TLS:!ADH:!EXPORT56:!SHA:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP"
Also for the record, there was no problem with Safari - just IE.
Mark Aufflick wrote:
Hi all,
I have a quirky issue - when i connect ot my openacs (aolserver 3.3+ad13) site from mac ie, it refuses to access ssl pages, and complains that it (mac ie) does not support personal certificates. Further investigations shows that mac ie has a bug that won't let you access a site that ALLOWS personal certificates, even if it is optional.
Now I didn't even know that ns_openssl supported personal certificates, maybe current openssl library calls need a flag to tell them not to support personal certificates.
Before I go and get my hands good and dirty, does anyone have any ideas?
Mark.
DISCLAIMER: this post contains nothing regarding p0und proxies or any sub-function of ns_conn ;)
-- Mark Aufflick e: [EMAIL PROTECTED] w: www.pumptheory.com p: +61 438 700 647
-- AOLserver - http://www.aolserver.com/
To Remove yourself from this list, simply send an email to <[EMAIL PROTECTED]> with the body of "SIGNOFF AOLSERVER" in the email message. You can leave the Subject: field of your email blank.
-- Mark Aufflick e: [EMAIL PROTECTED] w: www.pumptheory.com p: +61 438 700 647
-- AOLserver - http://www.aolserver.com/
To Remove yourself from this list, simply send an email to <[EMAIL PROTECTED]> with the body of "SIGNOFF AOLSERVER" in the email message. You can leave the Subject: field of your email blank.
