Jeff,

Thanks for the info....As Clinton would say, "I feel your pain!"

Anyway, I don't know if we had the same problem or not.  After further
investigation, I found that the certificate we were trying to use was a SGC
(server gated cryptograpy) certificate from Verisign (sometimes called their
Global ID).  This cert has a couple of X509 extenstions that are marked as
'critical'.

These attributes, when presented to IE, would cause IE to do further checks
of the connection.  In fact, our problem was that the server name in the
cert did not match the FQDN of our test machine.  Thus, IE would take the
additional step of canceling the connection when the names didn't match
where Netscape would just prompt you to continue.

When we moved the server into the production environment, everything worked
fine.

Thanks again,

- Bob

> -----Original Message-----
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
> Sent: Sunday, August 06, 2000 2:42 PM
> To: Burns, Robert
> Cc: [EMAIL PROTECTED]
> Subject: Re: RE:MSIE Problem
> 
> 
> Hello Robert,
>     I never did, and I spent 5 solid days trying to fix it.  
> I finally gave
> up and installed a new server one that has two apache servers 
> running on it.
> One for SSL and one for Non-SSL clients.  Also, I did NOT use 
> the stupid
> RPMS.  I compiled everything from scratch from the tar balls.
>     Thier little fixes for MSIE that they post are definately not
> working!!!!!!  At least for your problem and my problem.  I 
> guess sooner or
> latter they will ACKNOWLEDGE that there is a problem.  But until then,
> reinstall everything was my only option.
> Jeff Gelina
> ISP Colorado Information Technologies
> ----- Original Message -----
> From: Burns, Robert <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Wednesday, July 26, 2000 6:42 AM
> Subject: RE:MSIE Problem
> 
> 
> > Jeff,
> >
> > I'm having simillar difficulties w/Apache-mod_ssl.....did 
> you ever get any
> > resolution?  I can't connect to your site
> (http://minnesota.coinfotech.com)
> > using IE 5.01 either...
> >
> > - Bob
> >
> > ------------------------------------------------------
> > Bob Burns                                        Zaxus
> > [EMAIL PROTECTED]           1-888-744-4976, X6510
> >                                 (local) 1-954-846-6510
> > ------------------------------------------------------
> >
> 
> ______________________________________________________________________
> Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
> User Support Mailing List                      [EMAIL PROTECTED]
> Automated List Manager                            [EMAIL PROTECTED]
> 
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to