Hi all,
We are experiencing performance issues with users browsing our web sites via
M$ Proxy.
The web server is Apache v1.3.9 with mod_ssl/2.4.9, Library: OpenSSL/0.9.4.
SSL is configured with a 128bit Verisign Global Site certificate.
When we browse the site directly or via a squid proxy, the performance is
normal. When ever we access it via Microsoft Proxy (including up to v
2.0.389) the performance degrades significantly (~ 20 times slower).
We happily browse other 40bit sites OK with no problem and in general 128bit
sites are slower. It is more noticeable in the case of our server. I
would like to prove or disprove the theory by dropping to a 40 bit, non SGC
key but even though I generated 40bit verisign trial certificates (and even
a snake oil cert), I still get a 128 bit session. Am I getting certs and
keys mixed up here and if so, what do I need to do to get it to drop down to
a 40 bit key?
I appreciate that this is not specifically about mod_ssl but if I ask
Verisign or M$, they immediately respond that the Global Site Certs aren't
supported under Apache.
TIA
James Hall-Kenney
Sytec Resources Limited
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
