Hi.

I'm having problems downloading files from my https site.
I read the faq and I searched through this mailing list, but I found no
solution. Of course the download is working under SSL with Netscape and with
all browsers on normal http.

This is my conf:
Apache/1.3.17 (Unix) ApacheJServ/1.1.2 mod_perl/1.25 PHP/4.0.4pl1 PHP/3.0.18
mod_ssl/2.8.0 OpenSSL/0.9.6 running on Linux 2.2.18

>From httpd.conf
##### Server config
<IfModule mod_ssl.c>
SSLPassPhraseDialog  builtin
SSLSessionCache         shm:/var/run/apache/ssl_scache(512000)
SSLSessionCacheTimeout  300
SSLMutex  file:/var/run/apache/ssl_mutex
SSLRandomSeed startup file:/dev/urandom 512
SSLRandomSeed connect file:/dev/urandom 512
SSLLog      /var/log/apache/ssl_engine_log
SSLLogLevel info
</IfModule>

##### Virtual host running ssl
    SSLEngine on
#    SSLCipherSuite
ALL:!ADH:!EXP56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
    SSLCipherSuite
ALL:!ADH:!RC4-MD5:!EXP-DES-CBC-SHA:!EXP-RC4-MD5:!EXPORT56:!EXP56:RC4+RSA:+HI
GH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
    SSLProtocol all -SSLv3
    SSLCertificateFile /coda/apache/htdocs/MySite/certs/ssl.pem
    <Files ~ "\.(cgi|shtml|phtml|php3|php?)$">
        SSLOptions +StdEnvVars
    </Files>
#    <Directory "/coda/apache/cgi-bin">
#       SSLOptions +StdEnvVars
#    </Directory>
    SetEnvIf User-Agent ".*MSIE.*" \
        ssl-unclean-shutdown \
        downgrade-1.0 force-response-1.0
    CustomLog /var/log/apache/www.centromultimediale.it/ssl_request_log \
        "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"

I found a lot of people on this ml having my same problem, and as you can
see I insert all what I found, but without success.
My test machine is Windows 2000 with IE6 and Windows NT with IE 5.5 sp1
56bit.

Any clue???
---
Cordiali saluti / Best regards
Andrea Cerrito
^^^^^^^^^^^^^^
Net.Admin @ Centro MultiMediale di Terni S.p.A.
P.zzale Bosco 3A
05100 Terni IT
Tel. 0744 / 5441330
Fax. 0744 / 5441372

______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to