Internet Explorer
Verion 5.50.4134.0600
Cipher Strenght: 128-bit
on
Swe Win98 SE
------------------------------------------------------------------
Niklas Fondberg Korridor AB
[EMAIL PROTECTED] http://www.korridor.se
Tel +46 8 720 41 50 [EMAIL PROTECTED]
Fax +46 8 720 41 60 Tantogatan 5
GSM +46 708 72 53 51 118 67 STOCKHOLM
SMS mailto:[EMAIL PROTECTED] Sweden
------------------------------------------------------------------
----- Original Message -----
From: "David Rees" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, November 29, 2000 3:51 AM
Subject: RE: Internet Explorer 5.5 summarized the problems?
> I've got one more thing to try after debugging some problems with a WebTV
> emulator over here. The WebTV Emulator was reporting SSL connection
> problems when accessing dynamic content (JRun). I had to add this line:
>
> SetEnvIf User-Agent ".*WebTV.*" !ssl-unclean-shutdown
>
> To my Apache/1.3.14 (Unix) mod_ssl/2.7.1 OpenSSL/0.9.6 configuration file
> after the
> SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown...
> line. What version of IE 5.5 are you using? You may want to try removing
> the ssl-unclean-shutdown value from the SetEnvIf parameter.
>
> FWIW, The exact same configuration works fine on a server running
> Apache/1.3.12 (Unix) mod_ssl/2.6.4 OpenSSL/0.9.5a
> I think it was something in OpenSSL which may have changed the behavior.
>
> I haven't had the resources to test any 40 or 56-bit browsers with the
> latest mod_ssl, so I'm not sure if they need it or not.
>
> -Dave
>
> > -----Original Message-----
> > From: [EMAIL PROTECTED]
> > [mailto:[EMAIL PROTECTED]]On Behalf Of Niklas Fondberg
> > Sent: Tuesday, November 28, 2000 8:14 AM
> > To: [EMAIL PROTECTED]
> > Subject: Re: Internet Explorer 5.5 summarized the problems?
> >
> >
> > �Didn't work I'm afraid, but thanks for the try.
> >
> > ----- Original Message -----
> > From: "David Rees" <[EMAIL PROTECTED]>
> > To: <[EMAIL PROTECTED]>
> > Sent: Tuesday, November 28, 2000 4:49 PM
> > Subject: Re: Internet Explorer 5.5 summarized the problems?
> >
> >
> > > Could you try this SSLCipherSuite line?
> > >
> > > SSLCipherSuite
> > ALL:!ADH:!EXP1024-RC4-SHA:!EXP1024-DES-CBC-SHA:!EXPORT56:RC4+RSA:+
> > HIGH:+MEDIUM:+LOW:+SSLv2:+EXP
> > >
> > > It has !EXP1024-RC4-SHA and !EXP1024-DES-CBC-SHA
> > >
> > > Thanks,
> > > Dave
> > >
> > > On Tue, Nov 28, 2000 at 04:31:56PM +0100, Niklas Fondberg wrote:
> > > > I have read the mailing lists over and over. I have read the
> > whole 2.7 manual, but
> > > > still not a clue of wy IE 5.5 generates a dns error. The
> > thing is that I compiled
> > > > apache 1.3.14, php-4.03p1, mysql-3.23.28-gamma,
> > openssl-0.9.6, and mod_ssl-2.7.1-1.3.14 on my redhat 6.1 and
> > everything was just fine yesterday night at home. This was on my
> > laptop with a dial up ISDN connection (I was on a 192.168.100.XXX
> > network) connecting to the server. The certificate is a custom
> > certificate generated by "make certificate" on compile time. Now
> > I'm with the same laptop at office and it doesn't work with
> > Internet Explorer 5.5 but works fine in Netscape and Opera 3.61.
> > The only difference is that at office I have a real IP number and
> > dns record. The server is located in europe so it isn't compiled
> > with the RSAREF.
> > > > I have tried all of the manual's I.E. tricks and some of the
> > ones I found at the mail archives.
> > > > That means:
> > > > --------
> > > > SSLProtocol all -SSLv3
> > > > SSLCipherSuite
> > ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP
> > > > SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown
> > > > downgrade-1.0 force-response-1.0
> > > > --------
> > > ______________________________________________________________________
> > > Apache Interface to OpenSSL (mod_ssl) www.modssl.org
> > > User Support Mailing List [EMAIL PROTECTED]
> > > Automated List Manager [EMAIL PROTECTED]
> > >
> >
> > ______________________________________________________________________
> > Apache Interface to OpenSSL (mod_ssl) www.modssl.org
> > User Support Mailing List [EMAIL PROTECTED]
> > Automated List Manager [EMAIL PROTECTED]
>
> ______________________________________________________________________
> Apache Interface to OpenSSL (mod_ssl) www.modssl.org
> User Support Mailing List [EMAIL PROTECTED]
> Automated List Manager [EMAIL PROTECTED]
>
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
