I used to have the same problem (if I remember correctly).
I defined these settings and everything works pretty good.

----------- >8 8< -----------
SSLSessionCache dbm:/var/log/httpd/ssl_scache
SSLSessionCacheTimeout 600
SSLMutex file:/var/log/httpd/ssl_mutex
SSLCipherSuite ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown
----------- >8 8< -----------

along with the standard stuff like:

SSLEngine on, etc...

You'll have to modify the directory paths to fit you env.

Cheers,

- Rudy.

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Greg Hamilton
Sent: Thursday, April 26, 2001 6:15 PM
To: [EMAIL PROTECTED]
Subject: RE: SSLProtocol all -SSLv3 having no effect on ie 5
behavior--Solved


This seems similar to a problem I'm having.
I have a 128bit Verisign certificate.
I'm using Apache 1.3.14 (Win32), PHP/4.0.4pl1, mod_ssl/2.7.2 OpenSSL/0.9.6
IE5.0 users can't connect even with the 128bit encryption pack installed
unless they are using NT4.0 with the high encryption version of service pack
6 installed.
IE5.5 is ok as are version of Netscape >= 4.7
What SSL settings should I have in httpd.conf ?

-----Original Message-----
From: Tim Taylor [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 25, 2001 2:34 AM
To: [EMAIL PROTECTED]
Subject: RE: SSLProtocol all -SSLv3 having no effect on ie 5
behavior--Solved


That Worked
The session cache settings were what I needed.  Thanks for the response/

Tim Taylor
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to