That Worked
The session cache settings were what I needed.  Thanks for the response/

Tim Taylor

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of James Hastings-Trew
Sent: Tuesday, April 24, 2001 10:07 AM
To: [EMAIL PROTECTED]
Subject: Re: SSLProtocol all -SSLv3 having no effect on ie 5 behavior


on 4/23/01 6:30 PM, Tim Taylor at [EMAIL PROTECTED] wrote:


> So I went back to the archive and found some mention of ssl session cache
so
> I tried dropping in..
> SSLsessioncache none

I ran into this problem myself. You really do need a session cache.

SSLSessionCache  dbm:/var/cache/httpd/ssl_cache
SSLSessionCacheTimeout 300

That and the other two lines:

SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown \
downgrade-1.0 force-response-1.0

SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP


Those lines did the trick for me.

______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to