I performed a clean install (read as reformat and reload) for a server
used for secure http connects this weekend using RedHat 7.0, which came
with , such that the server is running Apache 1.3.14-3 using OpenSSL
0.9.5a and mod_ssl 2.7.1-3. Prior to the upgrade, the server had been
using Apache 1.3.6 and OpenSSL 0.9.3a. (I am unsure what version of
mod_ssl may have been on the server, possibly 2.3.5.)

Following this, I am now receiving reports of problems when some users
attempt to make https (secure http) connections. The browsers affected
appear to be those versions of IE (Internet Explorer) prior to 5.01 SP1
(I have been able to test versions 4.01 SP1a 128-bit, 5.00.2614.3500 40
and 128-bit, and duplicate the effect, but not with versions 5.01SP1 or
above). I had not received reports of such issues before the upgrade.

The general scenario I am seeing is thus: The user clicks on a link for
secure ordering, gets the form which is missing one or more of the
images also on the form page, but when they submit the form, they get an
error saying the server could not be found, or that a DNS error
occurred, or that an error occurred in the secure channel support. The
logs on the server show nothing regarding the connection.

I have contacted Microsoft, and while the technician I spoke with did
not rule out that there might be a problem with the earlier browsers, he
and the other technicians he spoke with suggested that since it became
apparent after the upgrade, that there may be a problem with a setting
or configuration option on the server.

I can find few if any references to this kind of issue, and generally
those only reference one particular incarnation of the browser. I am at
a loss as to the next step to take, so any suggestions (especially from
those having experienced and corrected similar issues) would be greatly,
greatly appreciated.

-Albert Croft
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to