> -----Messaggio originale-----
> Da: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]Per conto di David Rees
> Inviato: gioved� 10 maggio 2001 1.06
> A: [EMAIL PROTECTED]
> Oggetto: RE: R: Problems with IE and SSL
>
>
> >
> > Yes.
> > https://www.centromultimediale.it
> >
> > I'll post a zip file to test the download. I'll repost on this
> mail asap.
> >
> > Do you think that using Pragma: no-cache can cause this beavior?
> > I found on
> > MS site that IE can have problems on temp saving any file you try to
> > download over SSL... :(
> > I'll try to set it off too.
>
> I notice that your site doesn't support any RC4 ciphers, while
> most sites do
> (www.amazon.com, for example). I think that IE tries RC4 ciphers first,
> too.
Yes, it is.
> Can you recompile OpenSSL with RC4 support and retry? Maybe set up a test
> server so you don't have to mess with your production site?
My OpenSSL works with RC4 ciphers, but I disabled them for my test: RC4
ciphers are used for 56bit encryption too, so I tried 56bit browsers to use
40bit encryption to see if it could be my problem (it wasn't, anyway :( ).
This is my test conf:
SSLCipherSuite
ALL:!ADH:!RC4-MD5:!EXP-DES-CBC-SHA:!EXP-RC4-MD5:!EXPORT56:!EXP56:RC4+RSA:+HI
GH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
As you can see, all RC4 ciphers are disabled.
Tomorrow I'll enabled again.
Anyway, Neil seems to solve the problem removing the pragma: no-cache.
I'll try this too.
Thanks againg for the quick answer, Dave!
---
Cordiali saluti / Best regards
Andrea Cerrito
^^^^^^^^^^^^^^
Net.Admin @ Centro MultiMediale di Terni S.p.A.
P.zzale Bosco 3A
05100 Terni IT
Tel. +39 744 5441330
Fax. +39 744 5441372
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
