Hello,

>From the reference pages I pulled this out:

------------------------------------
dbm:/path/to/datafile

This makes use of a DBM hashfile on the local disk to synchronize
the local OpenSSL memory caches of the server processes.
The slight increase in I/O on the server results in a visible request
speedup for your clients, so this type of storage is generally recommended.
------------------------------------

I have not used Apache in a Windows env. But I assume a path is just a path.
So maybe just try:

SSLSessionCache dbm:c:\somecoolpath\ssl_scache


I'm not sure if the Windows type directory slashes need to be escaped or
not, such as:

dbm:c:\\somecoolpath\\ssl_scache


Cheers,

- Rudy.

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of
[EMAIL PROTECTED]
Sent: Friday, May 04, 2001 2:50 PM
To: [EMAIL PROTECTED]
Subject: RE: SSLProtocol all -SSLv3 having no effect on ie 5
behavior--Solved



I guess I had asked this previously as well, does anyone know how to define
the SSLSessionCache in Windows environment. I do not  know whether my NT
M/c supports DBM  or not!  What is meant by dbm??

Rajaram




                                               To:
<[EMAIL PROTECTED]>
                                               cc:
                                               Subject:    RE: SSLProtocol
all -SSLv3 having  no effect on ie 5
                                                    behavior--Solved
          "Rudy Aceves" <[EMAIL PROTECTED]>
                05/04/01     05:06 PM
            Please respond to modssl-users

          ----------------------------------+




I used to have the same problem (if I remember correctly).
I defined these settings and everything works pretty good.

----------- >8 8< -----------
SSLSessionCache dbm:/var/log/httpd/ssl_scache
SSLSessionCacheTimeout 600
SSLMutex file:/var/log/httpd/ssl_mutex
SSLCipherSuite ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown
----------- >8 8< -----------

along with the standard stuff like:

SSLEngine on, etc...

You'll have to modify the directory paths to fit you env.

Cheers,

- Rudy.

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Greg Hamilton
Sent: Thursday, April 26, 2001 6:15 PM
To: [EMAIL PROTECTED]
Subject: RE: SSLProtocol all -SSLv3 having no effect on ie 5
behavior--Solved


This seems similar to a problem I'm having.
I have a 128bit Verisign certificate.
I'm using Apache 1.3.14 (Win32), PHP/4.0.4pl1, mod_ssl/2.7.2 OpenSSL/0.9.6
IE5.0 users can't connect even with the 128bit encryption pack installed
unless they are using NT4.0 with the high encryption version of service
pack
6 installed.
IE5.5 is ok as are version of Netscape >= 4.7
What SSL settings should I have in httpd.conf ?

-----Original Message-----
From: Tim Taylor [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 25, 2001 2:34 AM
To: [EMAIL PROTECTED]
Subject: RE: SSLProtocol all -SSLv3 having no effect on ie 5
behavior--Solved


That Worked
The session cache settings were what I needed.  Thanks for the response/

Tim Taylor
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]




______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to