Hi,
This may not actually be a problem with mod_ssl, but given the
number of messages in the modssl-users archive regarding problems
with IE, I thought I'd post here and see if anyone else has
seen this problem.
When I try to connect to my Apache/mod_ssl server via https using
Internet Explorer 5.0 (build 2022) on the Macintosh, I consistently
end up in macsbug:
Bus Error at FFC9E1DC _stMASK0+00054
while reading 3 bytes from 800594D8 in User data space
The problem is repeatable (about 90% of the time). Also, it goes away
if I turn off loading images. Netscape doesn't have the problem, nor
do Netscape nor IE on the PC.
I read about problems with MSIE in the modssl-users archives, and found
many good tips. Unfortunately, I've tried everything mentioned there,
and nothing seems to help. Here are the config settings I've tried
changing; I've tried them in various combinations:
SSLCipherSuite ALL:!ADH:!EXP56:RC4+RSA:+HIGH:+MEDIUM:
+LOW:+SSLv2:+EXP:+eNULL [i.e. the default setting]
[no line break in the config file, either.]
SSLCipherSuite ALL:!SSLv3
[ie couldn't find a cipher to use]
SSLProtocol SSLv2
[doesn't work at all-- data decryption error]
SetEnvIf User-Agent ".*MSIE.*" \
nokeepalive ssl-unclean-shutdown \
downgrade-1.0 force-response-1.0
[also the default setting]
SetEnv nokeepalive
SetEnv ssl-unclean-shutdown
SetEnv downgrade-1.0
SetEnv force-response-1.0
[tried these in various combinations]
My server is Apache 1.3.12 with mod_ssl-2.6.6-1.3.12, and I'm currently
using a self-signed certificate for testing purposes.
I think the problem may actually be IE's dialog boxes, and not its SSL
code. When I first hit the test page (which is the default Apache/modssl
index.html) I get IE's (somewhat misleading) dialog box complaining about
my certificate. When it tries to load the images, I get the same dialog
again. Right before IE crashes, I get about half a beep, and IE draws an
empty dialog box, but I'm in macsbug before the third dialog box comes up.
Since the dialog never finishes drawing, I can't see what was supposed to
go in it, but the window is the same size as the previous two.
Has anybody seen this particular problem before?
Is there anything I can do about it from the mod_ssl side of things?
(I know, it looks like an MSIE bug, but I can't fix those!)
Do you think this problem would go away with a legitimately signed
certificate (because I wouldn't get the dialog boxes anymore)?
Any other workarounds or suggestions?
Thanks,
Scott
--------------------------------------------------
Scott Kelley, [EMAIL PROTECTED]
Biology Computing Services, UC San Diego
--------------------------------------------------
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
