Hi,

Please remember to put new lines in your e-mails! Well-behaved
mail clients (and MTAs) don't wrap text.
http://www.lemis.com/email-format.html

Niklas Fondberg wrote:
> 
> I have read the mailing lists over and over. I have read the whole 2.7 manual, but
> still not a clue of wy IE 5.5 generates a dns error. The thing is that I compiled
> apache 1.3.14, php-4.03p1, mysql-3.23.28-gamma, openssl-0.9.6, and 
>mod_ssl-2.7.1-1.3.14 on my redhat 6.1 and everything was just fine yesterday night at 
>home. This was on my laptop with a dial up ISDN connection (I was on a 
>192.168.100.XXX network) connecting to the server. The certificate is a custom 
>certificate generated by "make certificate" on compile time. Now I'm with the same 
>laptop at office and it doesn't work with Internet Explorer 5.5 but works fine in 
>Netscape and Opera 3.61. The only difference is that at office I have a real IP 
>number and dns record. The server is located in europe so it isn't compiled with the 
>RSAREF.

I _think_ I know what this is. I assume that the DNS error
you report is one of the "friendly" messages (and generally
useless) Explorer gives you.

If you use IE 5.0x to grab a https URL with something like

https://1.2.3.4/foo/bar.html

you will get an error. Netscape gives you a warning that
the certificate you are about to receive isn't from the
host that signed it.

Here's how I got round the problem (under NT): go to
c:\WINNT\SYSTEM32\etc and hack the hosts file there. Put in
the file a dummy entry that matches the hostname in the
certificate (???.snakeoil.com if I remember correctly) to
the IP address in your URL.

For me, this fooled IE into thinking the dummy hostname
resolved to your 192.168.100.XXX IP address.

I think I've got that right!

Adam.
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to