On Tue, Jul 18, 2000 at 01:10:12PM +0100, Stuart Gall wrote:
>
> It all works just fine with Netscape, however with IE5 5.01 and 5.01SP1
> it is very unreliable.
> Most of the time when I enter the URL I get
> "DNS Error or server unreachable"
>
> After several refreshes it prompts for the certificate to use.
>
> Even then it may still produce an error.
>
> Eventually if one is persistent enough the page is displayed.
>
> I have tried restricting the Cipher Suite to
> RSA:-RC2:-SHA1:-MEDIUM:-SSLv2:-NULL
> ie ONLY EXP-RC4-MD5
> But this made no difference.
>
> Anyone experienced similar problems?
Yes, please make sure the following lines are in your SSL virtual host:
SetEnvIf User-Agent ".*MSIE.*" \
nokeepalive ssl-unclean-shutdown \
downgrade-1.0 force-response-1.0
SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP
This cured all problems with MSIE for me.
-Dave
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
