I have been using mod_ssl with great sucess, except that I have lingering,
ongoing problems with customers using AOL and IE 5.0. People who use IE
standalone don't seem to have a problem. I have been combing through the
archives of this mailing list and I see other people have had problems too,
but I also see some solutions posted. I have tried the solutions, and still
I can't get people through the door using AOL and IE 5.0.

Here is my relevent config:

NameVirtualHost 204.144.237.82

SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown
downgrade-1.0 force-response-1.0

<VirtualHost nextalarm.com:443>
 ServerAlias *.nextalarm.com
 DocumentRoot /var/www/nextalarm.com
 ServerName www.nextalarm.com
 ServerAdmin [EMAIL PROTECTED]
 CustomLog /var/log/httpd/access_log_nextalarm.com combined

 <Directory "/var/www/nextalarm.com/usage">
  AuthType Basic
  AuthName "NextAlarm Usage Statistics"
  AuthUserFile "/etc/httpd/conf/users_nextalarm.com"
  Require valid-user
 </Directory>

 SSLEngine on
 SSLCertificateFile /etc/httpd/conf/ssl.crt/server.crt
 SSLCertificateKeyFile /etc/httpd/conf/ssl.key/server.key

 # I've tried all three of the following CipherSuites, with no success
 SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP
 #SSLCipherSuite ALL:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
 #SSLCipherSuite
ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL


</VirtualHost>


Here is a copy of recent log entries:

64.12.97.9 - - [24/Jan/2001:21:20:41 -0700] "GET /_t.html HTTP/1.0" 304 -
"-" "Mozilla/4.0 (compatible; MSIE 5.0; AOL 5.0; Windows 98; DigExt)"
64.240.74.67 - - [24/Jan/2001:21:22:03 -0700] "GET /_t.html HTTP/1.1" 200
367 "-" "Mozilla/4.0 (compatible; MSIE 5.0; AOL 5.0; Windows 98; DigExt)"
64.240.74.67 - - [24/Jan/2001:21:24:15 -0700] "GET /servlets/nextalarm
HTTP/1.1" 200 101 "-" "Mozilla/4.0 (compatible; MSIE 5.0; AOL 5.0; Windows
98; DigExt)"
64.12.97.9 - - [24/Jan/2001:21:25:05 -0700] "GET /_t.html HTTP/1.0" 304 -
"-" "Mozilla/4.0 (compatible; MSIE 5.0; AOL 5.0; Windows 98; DigExt)"
64.240.74.67 - - [24/Jan/2001:21:26:43 -0700] "POST /servlets/nextalarm
HTTP/1.1" 302 311 "http://www.nextalarm.com/_t.html" "Mozilla/4.0
(compatible; MSIE 5.0; AOL 5.0; Windows 98; DigExt)"

Is there something I haven't tried here which might work?

Tearing my hair out and appreciating any advice,

Bryan


______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to