1) IE4.0+ can access it;

2) AvantGO cannot; error message is "Spurious SSL handshake interrupt[Hint:
Usually just one of those OpenSSL confusions!?]"

3)AvantGO can access IIS on the same machine and same certificate;

4) Netscape3.1 will prompt it cannot recognize the authority who signed the
certificate.

I found differences between IIS and Apache+ModSSL are:
After "client hello", server will send back "Server Hello", "Certificate"
and other things.

IIS:
     struct {
         HandshakeType msg_type;    /* handshake type */
         uint24 length;             /* bytes in message */
         ServerHello;
         Certificate;
     } Handshake;

Apache:
     struct {
         HandshakeType msg_type;    /* handshake type */
         uint24 length;             /* bytes in message */
         ServerHello;
     } Handshake;
     struct {
         HandshakeType msg_type;    /* handshake type */
         uint24 length;             /* bytes in message */
         Certificate;
     } Handshake;

Which one is conforming to the spec? I am so confusing!

FYI: maybe it is because of this difference which cause AvantGO cannot
access Apache+ModSSL?

Thanks in advance.

Wei XU
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to