Sorry, I'm out of ideas for this one. Since it works on one machine but
not another, it must be some sort of compile time issue. Are you sure
you're building both the same way?
-Dave
On Wed, Nov 29, 2000 at 10:44:50AM +0100, Niklas Fondberg wrote:
> Internet Explorer
> Verion 5.50.4134.0600
> Cipher Strenght: 128-bit
> on
> Swe Win98 SE
>
> > I've got one more thing to try after debugging some problems with a WebTV
> > emulator over here. The WebTV Emulator was reporting SSL connection
> > problems when accessing dynamic content (JRun). I had to add this line:
> >
> > SetEnvIf User-Agent ".*WebTV.*" !ssl-unclean-shutdown
> >
> > To my Apache/1.3.14 (Unix) mod_ssl/2.7.1 OpenSSL/0.9.6 configuration file
> > after the
> > SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown...
> > line. What version of IE 5.5 are you using? You may want to try removing
> > the ssl-unclean-shutdown value from the SetEnvIf parameter.
> >
> > FWIW, The exact same configuration works fine on a server running
> > Apache/1.3.12 (Unix) mod_ssl/2.6.4 OpenSSL/0.9.5a
> > I think it was something in OpenSSL which may have changed the behavior.
> >
> > I haven't had the resources to test any 40 or 56-bit browsers with the
> > latest mod_ssl, so I'm not sure if they need it or not.
> >
> > -Dave
> >
> > > �Didn't work I'm afraid, but thanks for the try.
> > >
> > > > Could you try this SSLCipherSuite line?
> > > >
> > > > SSLCipherSuite
> > > ALL:!ADH:!EXP1024-RC4-SHA:!EXP1024-DES-CBC-SHA:!EXPORT56:RC4+RSA:+
> > > HIGH:+MEDIUM:+LOW:+SSLv2:+EXP
> > > >
> > > > It has !EXP1024-RC4-SHA and !EXP1024-DES-CBC-SHA
> > > >
> > > > On Tue, Nov 28, 2000 at 04:31:56PM +0100, Niklas Fondberg wrote:
> > > > > I have read the mailing lists over and over. I have read the
> > > whole 2.7 manual, but
> > > > > still not a clue of wy IE 5.5 generates a dns error. The
> > > thing is that I compiled
> > > > > apache 1.3.14, php-4.03p1, mysql-3.23.28-gamma,
> > > openssl-0.9.6, and mod_ssl-2.7.1-1.3.14 on my redhat 6.1 and
> > > everything was just fine yesterday night at home. This was on my
> > > laptop with a dial up ISDN connection (I was on a 192.168.100.XXX
> > > network) connecting to the server. The certificate is a custom
> > > certificate generated by "make certificate" on compile time. Now
> > > I'm with the same laptop at office and it doesn't work with
> > > Internet Explorer 5.5 but works fine in Netscape and Opera 3.61.
> > > The only difference is that at office I have a real IP number and
> > > dns record. The server is located in europe so it isn't compiled
> > > with the RSAREF.
> > > > > I have tried all of the manual's I.E. tricks and some of the
> > > ones I found at the mail archives.
> > > > > That means:
> > > > > --------
> > > > > SSLProtocol all -SSLv3
> > > > > SSLCipherSuite
> > > ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP
> > > > > SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown
> > > > > downgrade-1.0 force-response-1.0
> > > > > --------
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
