On Wed, 2002-02-20 at 12:19, Brian W. Horner wrote: Hello All, I have several RaQ4r's with 128 bit certificates from VeriSign for our shopping cart systems. On both of them we have issues with "Page can not be displayed" errors when Internet Explorer users are either adding products to the cart or just browsing pages under https://. (I haven't had a reported case of this happening under Netscape.) If they use the back button and try the link again, it works fine. It seems like a timing issue with the server but could be related to our cgi based shopping cart.? (We use the same one on both servers) Is there a way to tweak with the SSL configuration setting outside the gui? I have searched the archives and can't seem to locate anything regarding this issue. <frown> Thanks in advance for any help you could give me or direction you can point me in... Brian W. Horner Here's a snippet from my httpd.conf file. I too had this problem. I found the answer at the openssl website www.openssl.org. # global ssl setup <IfModule mod_ssl.c> SSLSessionCache dbm:/var/log/httpd/ssl_scache SSLSessionCacheTimeout 300 SSLMutex file:/var/log/httpd/ssl_mutex SSLRandomSeed startup file:/dev/urandom 512 SSLRandomSeed connect builtin # Location of a secondary signing authority certificate. Uncomment and edit # the location if necessary if you install a secondary certificate. #SSLCACertificateFile /etc/httpd/conf/ca-bundle
#### HERE ARE THE CHANGES # Changes Added by matt (thanks to Jason and Larry [EMAIL PROTECTED]) # The rest (until next #)goes on a single line SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0 #SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP </IfModule> Matt Nuzum _______________________________________________ cobalt-developers mailing list [EMAIL PROTECTED] http://list.cobalt.com/mailman/listinfo/cobalt-developers