I've got one more thing to try after debugging some problems with a WebTV
emulator over here. The WebTV Emulator was reporting SSL connection
problems when accessing dynamic content (JRun). I had to add this line:
SetEnvIf User-Agent ".*WebTV.*" !ssl-unclean-shutdown
To my Apache/1.3.14 (Unix) mod_ssl/2.7.1 OpenSSL/0.9.6 configuration file
after the
SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown...
line. What version of IE 5.5 are you using? You may want to try removing
the ssl-unclean-shutdown value from the SetEnvIf parameter.
FWIW, The exact same configuration works fine on a server running
Apache/1.3.12 (Unix) mod_ssl/2.6.4 OpenSSL/0.9.5a
I think it was something in OpenSSL which may have changed the behavior.
I haven't had the resources to test any 40 or 56-bit browsers with the
latest mod_ssl, so I'm not sure if they need it or not.
-Dave
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of Niklas Fondberg
> Sent: Tuesday, November 28, 2000 8:14 AM
> To: [EMAIL PROTECTED]
> Subject: Re: Internet Explorer 5.5 summarized the problems?
>
>
> �Didn't work I'm afraid, but thanks for the try.
>
> ----- Original Message -----
> From: "David Rees" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Tuesday, November 28, 2000 4:49 PM
> Subject: Re: Internet Explorer 5.5 summarized the problems?
>
>
> > Could you try this SSLCipherSuite line?
> >
> > SSLCipherSuite
> ALL:!ADH:!EXP1024-RC4-SHA:!EXP1024-DES-CBC-SHA:!EXPORT56:RC4+RSA:+
> HIGH:+MEDIUM:+LOW:+SSLv2:+EXP
> >
> > It has !EXP1024-RC4-SHA and !EXP1024-DES-CBC-SHA
> >
> > Thanks,
> > Dave
> >
> > On Tue, Nov 28, 2000 at 04:31:56PM +0100, Niklas Fondberg wrote:
> > > I have read the mailing lists over and over. I have read the
> whole 2.7 manual, but
> > > still not a clue of wy IE 5.5 generates a dns error. The
> thing is that I compiled
> > > apache 1.3.14, php-4.03p1, mysql-3.23.28-gamma,
> openssl-0.9.6, and mod_ssl-2.7.1-1.3.14 on my redhat 6.1 and
> everything was just fine yesterday night at home. This was on my
> laptop with a dial up ISDN connection (I was on a 192.168.100.XXX
> network) connecting to the server. The certificate is a custom
> certificate generated by "make certificate" on compile time. Now
> I'm with the same laptop at office and it doesn't work with
> Internet Explorer 5.5 but works fine in Netscape and Opera 3.61.
> The only difference is that at office I have a real IP number and
> dns record. The server is located in europe so it isn't compiled
> with the RSAREF.
> > > I have tried all of the manual's I.E. tricks and some of the
> ones I found at the mail archives.
> > > That means:
> > > --------
> > > SSLProtocol all -SSLv3
> > > SSLCipherSuite
> ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP
> > > SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown
> > > downgrade-1.0 force-response-1.0
> > > --------
> > ______________________________________________________________________
> > Apache Interface to OpenSSL (mod_ssl) www.modssl.org
> > User Support Mailing List [EMAIL PROTECTED]
> > Automated List Manager [EMAIL PROTECTED]
> >
>
> ______________________________________________________________________
> Apache Interface to OpenSSL (mod_ssl) www.modssl.org
> User Support Mailing List [EMAIL PROTECTED]
> Automated List Manager [EMAIL PROTECTED]
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
