I have been using mod_ssl with great sucess, except that I have lingering, ongoing problems with customers using AOL and IE 5.0. People who use IE standalone don't seem to have a problem. I have been combing through the archives of this mailing list and I see other people have had problems too, but I also see some solutions posted. I have tried the solutions, and still I can't get people through the door using AOL and IE 5.0. Here is my relevent config: NameVirtualHost 204.144.237.82 SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0 <VirtualHost nextalarm.com:443> ServerAlias *.nextalarm.com DocumentRoot /var/www/nextalarm.com ServerName www.nextalarm.com ServerAdmin [EMAIL PROTECTED] CustomLog /var/log/httpd/access_log_nextalarm.com combined <Directory "/var/www/nextalarm.com/usage"> AuthType Basic AuthName "NextAlarm Usage Statistics" AuthUserFile "/etc/httpd/conf/users_nextalarm.com" Require valid-user </Directory> SSLEngine on SSLCertificateFile /etc/httpd/conf/ssl.crt/server.crt SSLCertificateKeyFile /etc/httpd/conf/ssl.key/server.key # I've tried all three of the following CipherSuites, with no success SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP #SSLCipherSuite ALL:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL #SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL </VirtualHost> Here is a copy of recent log entries: 64.12.97.9 - - [24/Jan/2001:21:20:41 -0700] "GET /_t.html HTTP/1.0" 304 - "-" "Mozilla/4.0 (compatible; MSIE 5.0; AOL 5.0; Windows 98; DigExt)" 64.240.74.67 - - [24/Jan/2001:21:22:03 -0700] "GET /_t.html HTTP/1.1" 200 367 "-" "Mozilla/4.0 (compatible; MSIE 5.0; AOL 5.0; Windows 98; DigExt)" 64.240.74.67 - - [24/Jan/2001:21:24:15 -0700] "GET /servlets/nextalarm HTTP/1.1" 200 101 "-" "Mozilla/4.0 (compatible; MSIE 5.0; AOL 5.0; Windows 98; DigExt)" 64.12.97.9 - - [24/Jan/2001:21:25:05 -0700] "GET /_t.html HTTP/1.0" 304 - "-" "Mozilla/4.0 (compatible; MSIE 5.0; AOL 5.0; Windows 98; DigExt)" 64.240.74.67 - - [24/Jan/2001:21:26:43 -0700] "POST /servlets/nextalarm HTTP/1.1" 302 311 "http://www.nextalarm.com/_t.html" "Mozilla/4.0 (compatible; MSIE 5.0; AOL 5.0; Windows 98; DigExt)" Is there something I haven't tried here which might work? Tearing my hair out and appreciating any advice, Bryan ______________________________________________________________________ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
