If I might trouble the list some more.
I think my problem is related to the keepalive/handshaking because on all
of the clients that fail, you can get into the first page. Then if you wait
long enough between pages, you can go to each of the next.
Netscape is fine.
Some IE5 clients are fine (500.2919) though I have reports of users failing
over dial-up (slower than my testing) connection.
The error is:
Spurious SSL handshake interrupt[Hint: Usually just one of those OpenSSL
confusions!?]
I have created another test server using Apache 1.3.12, openssl -0.9.5a,
and modssl 2.6.2-1.3.12. OS is Solaris Intel 2.7.
Similar results with the same clients. Now the IE clients that fail against
Apache 1.3.11, openssl -0.9.4, and modssl 2.5.1-1.3.11 do not even get the
first page. Log file looks like
[14/Apr/2000 04:30:26 08396] [info] Connection to child 4 established
(server harlem.gto.com:443, client 192.168.0.17)
[14/Apr/2000 04:30:26 08396] [info] Seeding PRNG with 1160 bytes of entropy
[14/Apr/2000 04:30:27 08396] [info] Spurious SSL handshake interrupt[Hint:
Usually just one of those OpenSSL confusions!?]
.The client correctly identifies the certificate mismatch and, when told to
proceed, fails with the error in the secure socket channel (IE 4).
In addition to this line in httpd.conf
SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown.
I've tried turning keepalive off. completely or
BrowserMatch "MSIE 5.*" nokeepalive
BrowserMatch "MSIE 4.*" nokeepalive
Any other suggestions on what to look for gratefully received.
Thanks
robert monical
360-253-2365
[EMAIL PROTECTED]
"Letter writing is the only device for combining solitude and good company."
Lord Byron
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
