I have built my apache 1.3.12 with mod_ssl 2.6.6-1.3.12. And i have created
a certificate by make certificate. I have asked verisign to sign my
certificate and i put it in server.crt. The problem is : it works well with
netscape, but not with IE (i'm using ie 5.5 with latest 128bit encryption).
The following is the ssl_engine_log:
For IE:
[02/Sep/2000 09:43:34 18822] [info] Connection to child 2 established
(server mywebsite.com:443, client 192.168.1.2)
[02/Sep/2000 09:43:34 18822] [info] Seeding PRNG with 1160 bytes of entropy
[02/Sep/2000 09:43:35 18822] [info] Connection: Client IP: 192.168.1.2,
Protocol: SSLv3, Cipher: RC4-MD5 (128/128 bits)
[02/Sep/2000 09:43:35 18822] [info] Connection to child 2 closed with
standard shutdown (server mywebsite:443, client 192.168.1.2)
For Netscape:
[02/Sep/2000 09:44:46 06098] [info] Connection: Client IP: 192.168.1.2,
Proto
col: SSLv3, Cipher: EXP-RC4-MD5 (40/128 bits)
[02/Sep/2000 09:44:46 06098] [info] Connection: Client IP: 192.168.1.2,
Protocol: SSLv3, Cipher: RC4-MD5 (128/128 bits)
[02/Sep/2000 09:44:48 09524] [info] Connection to child 9 established
(server mywebsite.com:443, client 192.168.1.2)
[02/Sep/2000 09:44:48 09524] [info] Seeding PRNG with 1160 bytes of entropy
[02/Sep/2000 09:44:48 06238] [info] Connection to child 1 established
(server mywebsite.com:443, client 192.168.1.2)
...continued with with connection...
Is it something about the httpd.conf?
This is my httpd.conf:
SSLCipherSuite ALL:!ADH:!EXP56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
SetEnvIf User-Agent ".*MSIE.*" \
nokeepalive ssl-unclean-shutdown \
downgrade-1.0 force-response-1.0
Thank you very much!!
_________________________________________________________________________
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.
Share information about yourself, create your own public profile at
http://profiles.msn.com.
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
