Hello again,
> > When I connect securely to my Apache Server (mod_ssl enabled) using
> > Netscape Version 4.5 and greater (Solaris/Win95/NT) I always get
> > "Netscape encountered bad data from the server" error.
> > Everything works fine using Netscape4.05 for Linux.
> >
> > I do not have any certificates installed (the list is empty)!
> >
> > As I am using the international 40Bit Version of Netscape, can this be the
> > problem when requesting a 1024Bit Certificate - there have been reported
> > errors with O'Reilly's WEBSITE webserver having this problem.
>
> First, you should look inside your server logfiles! There usually
> is always at least a hint to the problem. Second, the "bad data" is
> usually caused if you connect with HTTPS to a port where only HTTP is
> spoken. Check your server configuration. My recommendation: Install
> Apache+mod_ssl+OpenSSL from scratch (to a temporary installation
> location) and make sure it works. If it does, compare the default
> configuration with your one. If does not, complain again.
I followed the above recommendations ... it's still not working though.
I can access the secure pages using Netscape3.01 (or IE 3/4/5). The same
does NOT work using Netscape4.7.
I am using standard setup: http port 80, https port 443
I have attached information from O'Reilly's WebsitePro describing the same
problem. This page can be found at:
http://software.oreilly.com/techsupport/kb/website_kb_article_display_frame.cfm?ID_KBArticle=313
Thanks,
Alex
<HTML>
<HEAD>
<TITLE>WebSite - Product Support: Knowledge Base</TITLE>
</HEAD>
<BODY bgcolor="White" TEXT="Black" LINK="Red" VLINK="Purple" ALINK="Silver">
<center>
<TABLE BORDER=0 CELLSPACING=0 CELLPADDING=0 width=610>
<TR>
<TD VALIGN=top width=161><IMG SRC="/images/WSC_productinfo_logo.gif" ALT="WebSite
Professional 2.0 Logo" width=161 height=62></TD>
<td valign=bottom width=449>
<TABLE BORDER=0 CELLSPACING=0 CELLPADDING=0 width=449>
<tr><TD VALIGN=MIDDLE ALIGN=CENTER><FONT FACE="Verdana, Arial, Helvetica"
color="black" SIZE=5><b>Product Support:</b></FONT> <FONT FACE="Verdana, Arial,
Helvetica" color="black" SIZE=3><b>Knowledge Base</b></font></td></tr>
<TR><TD bgcolor="#ffffbf" valign=top align=right><img src="/images/black_pixel.gif"
width=449 height=1></TD></TR>
<TR bgcolor="#FFFFBF"><TD valign=bottom align=right><img src="/images/black_pixel.gif"
width=1 height=12></TD></TR>
<TR><TD bgcolor="#ffffbf" valign=bottom align=right><img src="/images/black_pixel.gif"
width=1 height=3></TD></TR>
<TR><TD bgcolor="#ffffbf" valign=bottom><img src="/images/black_pixel.gif" width=449
height=1></TD></TR>
</TABLE>
</TD></TR>
</TABLE>
<table width=610 border=0 cellspacing=0 cellpadding=0>
<tr>
<td bgcolor="#000000"><img src="/images/black_pixel.gif" width=1 height=1></td>
<td bgcolor="#FFFFBF" width=159><img src="/images/dot_clear1.gif" width=159
height=1"></td>
<td bgcolor="#000000" width=1 valign="top"><img src="/images/black_pixel.gif" width=1
height=1"></td>
<td bgcolor="#FFFFFF" width=10><img src="/images/white_pixel.gif" width=10
height=10"></td>
<td valign="top" width=440></td>
</tr>
<tr>
<td bgcolor="#000000"><img src="/images/black_pixel.gif" width=1 height=1></td>
<td bgcolor="#ffffbf" width=159 valign=top>
<br>
<TABLE CELLPADDING=7 BORDER=0 VALIGN="TOP">
<TR>
<TD width=100%>
<font face="verdana, arial" size=2><b>Comments:</b>
<img src="/images/black_pixel.gif" width=140 height=1>
<font size=1>Help us in making this Knowledge Base a more helpful area for you. Please
leave us a comment telling us whether or not you found this article helpful. Only by
knowing which articles are helpful, can we improve this Knowledge Base. Feel free to
let us know if you couldn't find any material on a specific subject too.
</font></font>
</TD>
</TR>
</TABLE>
</td>
<td bgcolor="#000000" width=1 valign="top"><img src="/images/black_pixel.gif" width=1
height=1"></td>
<td bgcolor="#FFFFFF" width=10><img src="/images/white_pixel.gif" width=10
height=1"></td>
<td valign="top" width=440>
<img src="/images/dotclear.gif" border=0 height=15 width=1><br>
<FONT FACE="Arial" color="black" SIZE=4><b>Full Article</b></font>
<P>
<table width="440 Border="0" cellpadding=3 cellspacing=1>
<tr bgcolor="#000000"><td><b><font face="arial" size=2 color="#FFFFFF">Netscape
Browser 4.06 domestic strength receives "Bad data" message from SSL 3.0 full strength
WebSite Pro 2.0</b></td></tr>
<tr bgcolor="#EEEEEE"><td><font face="arial" size=1><b>ID:</b> 313 / <b>Created:</b>
14-Oct-98 / <b>Last Updated:</b> 12-Nov-98</font></td></tr>
<tr bgcolor="#FFFFFF"><td><font face="arial" size=2><h3>Symptom</h3>
A Netscape domestic strength browser 4.06 and greater, when trying to establish an SSL
3.0 session with a full strength WebSite Pro 2.0 server, gets a "Bad data" message
during the SSL handshake protocol. This happens only when the conditions listed below
are met.
<br>
<h4>Necessary Conditions, Server</h3>
<ul>
<li>The WebSite Pro server is domestic strength, version 2.1 to 2.3.7 and is
configured for SSL 3.0.
<li>The digitial certificate was requested and issued when the server was configured
for full strength (128 bit) encryption. Certificates requested and issued when the
server was export strength (40-bit) encryption will not have the problem.
</ul>
<h4>Necessary Conditions, Browser</h3>
<ul>
<li>The Netscape browser is domestic strength, version 4.06 or greater. (See below
for how to determine this.)
<li>The cipher is set to "RC4 encryption with a 40-bit key and MD5 MAC" or "RC2
encryption with 40-bit key and MD5 MAC" in the Netscape browser.
<li>The browser is configured for SSL 3.0 (the problem does not occur when it's
configured for SSL 2.0).
</ul>
<h3>Background</h3>
Netscape has tightened-up their compliance with the SSL 3.0 requirements with version
4.06 and greater. The RSA public key is used for key exchange. For export strength
SSL,
the key exchange key must be no bigger than 512 bits. Previously, most browsers were
accepting an RSA 1024-bit public key for key exchange, but this is not in full
compliance with the regulations. The newer Netscape 4.06 export strength browser will
now indicate "Bad data" when presented with the wrong strength RSA key for an export
strength SSL 3.0 session.
<br>
<h3>Solutions</h3>
If you encounter this problem with your domestic, full strength WebSite Pro server, we
recommend that you:
<ul>
<li>Download WebSite Pro 2.3.10 from our WebSite Software Library using your access
number.
</ul>
<h3>How to determine the version of Netscape</h3>
To determine if you have 40-bit or 128-bit security, follow these steps:
<ol>
<li>In Navigator or Communicator, open the Help menu and choose About
Navigator (or Communicator).
<li>Look for the section that reads "Contains encryption software from RSA Data
Security, Inc".
<li>.If the next paragraph says "This version supports U.S.
security...", that means you have 128-bit security. If it says
you have export, that means you have 40-bit security.
</ol>
You can also find this information by typing the following line into the Netsite, or
Location line:<br>
<pre> javascript:document.write(navigator.userAgent+"<BR&rt;")</pre>
<p>Press Enter and the browser will display the string that identifies your browser
to Web sites. It will read something like:
<pre> Mozilla/4.06 [en] (WinNT; U)</pre>
<p> where
<ul>
<li>Mozilla/x.xx is the version of the browser
<li>[en] is the language (i.e. "[en]" means "English")
<li>The first part of the display in the parenthesis is your operating
system (i.e. WinNT means "Windows NT")
<li>The last character is your security grade. U is US, 128-bit and I
is International, 40-bit.
</ul></font></td></tr>
</table>
<P>
<form action="article_comment_add.cfm" method="post">
<table width="440 Border="0" cellpadding=3 cellspacing=1>
<tr bgcolor="#EEEEEE"><td><font face="arial" size=2><b>Did your find this article
helpful?</b><font></td><td nowrap><font face="arial" size=2><INPUT TYPE="radio"
NAME="Helpful" VALUE="1" checked><b> Yes</b></td><td><font face="arial" size=2><INPUT
TYPE="radio" NAME="Helpful" VALUE="0"><b> No</b></font></td><td><font face="arial"
size=2><INPUT TYPE="radio" NAME="Helpful" VALUE="2"><b> Didn't
Apply</b></font></td><tr>
</table>
<table width="440 Border="0" cellpadding=3 cellspacing=1>
<tr><td valign="top"><font face="arial" size=2
color="#000000"><b>Comment</b></td><td><TEXTAREA NAME="Comment_Text" COLS=30 ROWS=2
wrap></TEXTAREA></td></tr>
<tr><td><br></td><td><INPUT TYPE="hidden" NAME="KBHome"
VALUE="website_kb_frame.html"><INPUT TYPE="hidden" NAME="ID_KBArticle"
VALUE="313"><INPUT TYPE="submit" VALUE="Send Comments"></td></tr>
</table>
</form>
</td>
</tr>
<tr>
<td bgcolor="#000000"><img src="/images/black_pixel.gif" width=1 height=1></td>
<td bgcolor="#ffffbf" width=159><img src="/images/dot_clear1.gif" width=159
height=1"></td>
<td bgcolor="#000000" width=1 valign="top"><img src="/images/black_pixel.gif" width=1
height=1"></td>
<td bgcolor="#FFFFFF" width=10><img src="/images/white_pixel.gif" width=10
height=10"></td>
<td valign="top" width=440><br></td>
</tr>
<tr>
<td colspan=3 valign="top">
<table width=161 border=0 cellpadding=0 cellspacing=0>
<tr>
<td bgcolor="#000000"><img src="/images/black_pixel.gif" width=1 height=34></td>
<td bgcolor="#ffffbf" width=159 align=center>
<A HREF="http://website.oreilly.com/" target="_top"><IMG SRC="/IMAGES/WSP2_home2.gif"
WIDTH=75 HEIGHT=28 BORDER=0 alt="WebSite Home" hspace=42></A>
</td>
<td bgcolor="#000000" width=1 valign="top"><img src="/images/black_pixel.gif" width=1
height=34"></td>
</tr>
<tr>
<td colspan=3><img src="/images/black_pixel.gif" width=161 height=1></td>
</tr>
</table>
</td>
<td colspan=2>
<TABLE BORDER=0 CELLSPACING=0 CELLPADDING=0 width=449>
<TR><TD colspan=5><img src="/images/white_pixel.gif" width=1 height=20"></TD></TR>
<TR><TD><img src="/images/black_pixel.gif" width=154 height=1"></TD><TD><img
src="/images/white_pixel.gif" width=20 height=1"></TD><TD><CENTER><A
HREF="http://software.oreilly.com/" TARGET="_top"><IMG SRC="/images/oso_footer.gif"
ALT="O'Reilly Software" WIDTH=100 HEIGHT=29 BORDER=0></A></CENTER></TD><TD><img
src="/images/white_pixel.gif" width=20 height=1"></TD><TD><img
src="/images/black_pixel.gif" width=154 height=1"></TD></TR>
<TR><TD colspan=5><img src="/images/white_pixel.gif" width=1 height=10"></TD></TR>
<TR><TD colspan=5>
<center>
<a href="http://software.ora.com/how_to_contact.html" target="_top"><font
FACE="Verdana, Arial, Helvetica" size=-2 color="red">How to Contact Us</font></a><font
FACE="Verdana, Arial, Helvetica" size=-2> - </font><a
href="http://software.ora.com/feedback_frame.html" target="_top"><font FACE="Verdana,
Arial, Helvetica" size=-2 color="red">Site Feedback</font></a><br>
<FONT FACE="Verdana, Arial, Helvetica" SIZE=-2><EM>© 1997, O'Reilly &
Associates, Inc.</EM></FONT>
</center>
</TD></TR>
</TABLE>
</td>
</tr>
</table>
</center>
</body>
</html>
