Ok. I will check that again...
thx
Chris
-----Ursprüngliche Nachricht-----
Von: Thierry Coopman [mailto:[EMAIL PROTECTED]]
Gesendet: Montag, 26. Februar 2001 16:00
An: [EMAIL PROTECTED]
Cc: '[EMAIL PROTECTED]'
Betreff: Re: AW: SSL v3 works with IE5.x on Apple Macintosh?
At 12:39 PM +0100 2/26/01, Christian Jürges wrote:
>Thank you Thierry,
>
>for your link. I tested that one on out old Power Macintosh 8600 with os
9.1
>and ie 5.0 (build 2022) and surprising: it can display your site without
any
>problems. The only thing I am wondering is, why does the ie does not show
>the secure symbol on left under frame ?
>
yup it doesn't show that it's secure, however
<https://zapdos.keytrade.com/graphs/> that displays the generated
image, does show the secure (RC4-128) ...
>Anyway:
>
>This how our httpd.conf looks like:
>
># virtual server for swiss-solidarity.org
><VirtualHost 194.6.181.168:80>
> DocumentRoot /opt/apache_glk/htdocs
> ServerName www.swiss-solidarity.org
> DirectoryIndex luck.php3 index.html index.htm
></VirtualHost>
>
># Virtual Server for swiss-solidarity.org running ssl
><VirtualHost 194.6.181.168:443>
> SSLEngine on
> SSLProtocol all
> SSLCertificateFile
>/opt/apache_glk/cert/verisign/final/swiss-solidarity.org/server.crt
> SSLCertificateKeyFile
>/opt/apache_glk/cert/verisign/final/swiss-solidarity.org/server.key.unsecur
e
> SSLCertificateChainFile
>/opt/apache_glk/cert/verisign/final/intermediate/verisign.crt
> SSLLogLevel warn
> SSLCipherSuite
>ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP
> SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown
>downgrade-1.0 force-response-1.0
> SSLLog logs/swiss-solidarity.ch.ssl.log
> DocumentRoot /opt/apache_glk/htdocs
> ServerName www.swiss-solidarity.org
> DirectoryIndex luck.php3 index.html index.htm
></VirtualHost>
>
>This config works for win-Machines, but Macs says: "Security failure. Data
>decryption error".
>
>Any ideas ?
I don't have the "SetEnvIf User-Agent ".*MSIE.*" nokeepalive
ssl-unclean-shutdown downgrade-1.0 force-response-1.0" line
active..., apart from that thats the only difference.
I'm using OpenSSL 0.9.5a, with mod_ssl-2.6.6-1.3.12 on a solaris 7 box
hope this helps
--
Thierry Coopman - [EMAIL PROTECTED]
My opinions are personal, and have really nothing or nothing to do
with Keytrade!
A computer without a Microsoft operating system is like a dog
without bricks tied to its head.
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
