It appears to work.
https://www.centromultimediale.it/logo.zip (a jpeg renamed in .zip)
This is my conf:
== APACHE
<VirtualHost www.centromultimediale.int:443>
...
CacheNegotiatedDocs
...
SSLEngine on
SSLCipherSuite
ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
SSLCertificateFile
/coda/apache/htdocs/www.centromultimediale.it/certs/ssl.pem
<Files ~ "\.(cgi|shtml|phtml|php3|php?)$">
SSLOptions +StdEnvVars
</Files>
SetEnvIf User-Agent ".*MSIE.*" \
ssl-unclean-shutdown \
downgrade-1.0 force-response-1.0
CustomLog /var/log/apache/www.centromultimediale.it/ssl_request_log \
"%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
</VirtualHost>
I think the Pragma: no-cache can be added to the faq... :)
Thanks everybody!!!
---
Cordiali saluti / Best regards
Andrea Cerrito
^^^^^^^^^^^^^^
Net.Admin @ Centro MultiMediale di Terni S.p.A.
P.zzale Bosco 3A
05100 Terni IT
Tel. +39 744 5441330
Fax. +39 744 5441372
> -----Messaggio originale-----
> Da: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]Per conto di David Rees
> Inviato: gioved� 10 maggio 2001 1.06
> A: [EMAIL PROTECTED]
> Oggetto: RE: R: Problems with IE and SSL
>
>
> >
> > Yes.
> > https://www.centromultimediale.it
> >
> > I'll post a zip file to test the download. I'll repost on this
> mail asap.
> >
> > Do you think that using Pragma: no-cache can cause this beavior?
> > I found on
> > MS site that IE can have problems on temp saving any file you try to
> > download over SSL... :(
> > I'll try to set it off too.
>
> I notice that your site doesn't support any RC4 ciphers, while
> most sites do
> (www.amazon.com, for example). I think that IE tries RC4 ciphers first,
> too.
>
> Can you recompile OpenSSL with RC4 support and retry? Maybe set up a test
> server so you don't have to mess with your production site?
>
> -Dave
>
> ______________________________________________________________________
> Apache Interface to OpenSSL (mod_ssl) www.modssl.org
> User Support Mailing List [EMAIL PROTECTED]
> Automated List Manager [EMAIL PROTECTED]
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
