You have no SSLSessionCache defined.

Add one, and everything should work OK.

MSIE isn't happy without SSL Session caching.

-Dave

> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of Erik Boles
> Sent: Wednesday, May 02, 2001 1:56 PM
> To: [EMAIL PROTECTED]
> Subject: RE: Strange problem with IE5.0 and SSLv3
>
>
> Sorry about that, here is our modssl config.
>
>
> <IfDefine HAVE_SSL>
>
> Listen 443
>
> <VirtualHost _default_:443>
> DocumentRoot /www/sites/secure
> ServerName < our server name here >
> ServerAdmin [EMAIL PROTECTED]
> ErrorLog /www/logs/httpd/error_log-ssl
> TransferLog /www/logs/httpd/access_log-ssl
> SSLEngine on
> SSLCipherSuite ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
> SSLCertificateFile /etc/httpd/conf/ssl.crt/server.crt
> #SSLCertificateFile /etc/httpd/conf/ssl.crt/server-dsa.crt
> SSLCertificateKeyFile /etc/httpd/conf/ssl.key/server.key
> #SSLCertificateKeyFile /etc/httpd/conf/ssl.key/server-dsa.key
> #SSLCertificateChainFile /etc/httpd/conf/ssl.crt/ca.crt
> #SSLCACertificatePath /etc/httpd/conf/ssl.crt
> #SSLCACertificateFile /etc/httpd/conf/ssl.crt/ca-bundle.crt
> #SSLCARevocationPath /etc/httpd/conf/ssl.crl
> #SSLCARevocationFile /etc/httpd/conf/ssl.crl/ca-bundle.crl
> #SSLVerifyClient require
> #SSLVerifyDepth  10
> SSLOptions +FakeBasicAuth +ExportCertData +CompatEnvVars +StrictRequire
> <Files ~ "\.(cgi|shtml)$">
>     SSLOptions +StdEnvVars
> </Files>
> <Directory "/var/www/cgi-bin">
>     SSLOptions +StdEnvVars
> </Directory>
> SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown
> CustomLog /var/log/httpd/ssl_request_log \
>           "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
> </VirtualHost>
>
>
>
>
>
>
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of David Rees
> Sent: Wednesday, May 02, 2001 12:27 PM
> To: [EMAIL PROTECTED]
> Subject: RE: Strange problem with IE5.0 and SSLv3
>
>
> Can you post your entire mod_ssl configuration?  This is difficult to
> diagnose without seeing.
>
> -Dave
>
> > -----Original Message-----
> > From: [EMAIL PROTECTED]
> > [mailto:[EMAIL PROTECTED]]On Behalf Of Erik Boles
> >
> > I have read several FAQ's and done some research regarding the
> problem IE
> > 5.0 has with modssl and allowing users to view a page, made a few
> > changes to
> > httpd.conf and still have the same problem.
> >
> > Using IE5 you can go view a secure page without a problem, but if
> > you click
> > the back button, then go to the link again, it gives a "Page cannot be
> > displayed" error.  You must quit the browser and re-launch it to
> > correct the
> > problem, OR disable SSLv3 in the browser.
> >
> > We have tried adding the -SSLv3 to the SSLCipherSuite line in
> > httpd.conf but
> > it didn't make any difference.
> >
> > Any input or URL's to visit regarding the fix to this would be greatly
> > appreciated.  I apologize if this has been answered many times before, I
> > couldn't find a slid answer to it.
>
> ______________________________________________________________________
> Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
> User Support Mailing List                      [EMAIL PROTECTED]
> Automated List Manager                            [EMAIL PROTECTED]
> ______________________________________________________________________
> Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
> User Support Mailing List                      [EMAIL PROTECTED]
> Automated List Manager                            [EMAIL PROTECTED]

______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to