Could you try this SSLCipherSuite line?
SSLCipherSuite
ALL:!ADH:!EXP1024-RC4-SHA:!EXP1024-DES-CBC-SHA:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP
It has !EXP1024-RC4-SHA and !EXP1024-DES-CBC-SHA
Thanks,
Dave
On Tue, Nov 28, 2000 at 04:31:56PM +0100, Niklas Fondberg wrote:
> I have read the mailing lists over and over. I have read the whole 2.7 manual, but
> still not a clue of wy IE 5.5 generates a dns error. The thing is that I compiled
> apache 1.3.14, php-4.03p1, mysql-3.23.28-gamma, openssl-0.9.6, and
>mod_ssl-2.7.1-1.3.14 on my redhat 6.1 and everything was just fine yesterday night at
>home. This was on my laptop with a dial up ISDN connection (I was on a
>192.168.100.XXX network) connecting to the server. The certificate is a custom
>certificate generated by "make certificate" on compile time. Now I'm with the same
>laptop at office and it doesn't work with Internet Explorer 5.5 but works fine in
>Netscape and Opera 3.61. The only difference is that at office I have a real IP
>number and dns record. The server is located in europe so it isn't compiled with the
>RSAREF.
> I have tried all of the manual's I.E. tricks and some of the ones I found at the
>mail archives.
> That means:
> --------
> SSLProtocol all -SSLv3
> SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP
> SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown
> downgrade-1.0 force-response-1.0
> --------
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
