As I stated, it is intermittent, but occurs very frequently on all PCs in
both our development environment and in our customer's production
environment. We have even see it happen with both the IE 5.50 and IE 5.0
browser. There is actually one page on our website I can always produce the
error on. It occurs randomly on the other pages of our website. I have
worked on this issue with Oracle Technical Support for the past week. They
say it has nothing to do with the Oracle 9iAS Portal software we are using
for the web application, since none of this occurs with the Netscape
Browser. They suggested filing a bug report with the mod_ssl module (which
I have) and pose the issue to the discussion forum.
I saw one other similar bug report in the mod_ssl bug database (PR#528) from
March 2001. But is was unresolved. That person also stated that there
appears to be a timing factor to the problem, occurring more often when
going over a slow connection. I also have been in contact with 4 other
users from the Oracle 9iAS Portal discussion forum with this same problem.
One chose to turn off SSL to get around the problem. The other is requiring
users to use only the Netscape browser. The other two are in the same
situation I am in. We need to get a resolution because or customer must use
the IE browser and SSL due to their security policy.
The FAQ for mod_ssl does state that "the SSL implementation in some MSIE
versions has some subtle bugs related to the HTTP keep-alive facility and
the SSL close notify alerts on socket connection close. Additionally, the
interaction between SSL and HTTP/1.1 features are problematic with some MSIE
versions too. You have to work-around these problems by forcing
Apache+mod_ssl+OpenSSL to not use HTTP/1.1, keep alive connections or
sending the SSL close notify messages to MSIE clients." The directive they
provide also forces the connection to downgrade to HTTP 1.0. We tried the
directive, but still received the errors.
Carol Kuczborski
EDS - Enabling Business Solutions
MS A6N-B47
13600 EDS Drive
Herndon, VA 20171
* phone: +01-703-742-1025 (8-432)
* mailto:[EMAIL PROTECTED]
www.eds.com
-----Original Message-----
From: Tim Gardner [mailto:[EMAIL PROTECTED]]
Sent: Monday, August 06, 2001 7:18 PM
To: [EMAIL PROTECTED]
Cc: Kuczborski, Carol L
Subject: RE: Intermittent "Page cannot be displayed" and "Cannot find
erro r or DNS error" using mod_ssl and IE 5.5
Carol
Does this happen
on some machines some of the time or
on some machines all of the time or
on all machines some of the time or
on all machines all the time?
TIm
>Our users are using Microsoft IE on Windows platforms, none are on
>Macintosh. We tried the fix you mentioned, as also noted in the FAQ for
>mod_ssl under the heading "When I connect via HTTPS to an Apache + mod_ssl
+
>OpenSSL server with Microsoft Internet Explorer (MSIE) I get various I/O
>errors", but it did not work. In fact, we seemed to get more of the
errors.
>
>Any other suggestions?
>
>Carol Kuczborski
>EDS - Enabling Business Solutions
>MS A6N-B47
>13600 EDS Drive
>Herndon, VA 20171
>
>* phone: +01-703-742-1025 (8-432)
>* mailto:[EMAIL PROTECTED]
>www.eds.com
>
>
>
>-----Original Message-----
>From: David Rees [mailto:[EMAIL PROTECTED]]
>Sent: Monday, August 06, 2001 6:27 PM
>To: [EMAIL PROTECTED]
>Subject: Re: Intermittent "Page cannot be displayed" and "Cannot find
>error or DNS error" using mod_ssl and IE 5.5
>
>
>On Mon, Aug 06, 2001 at 02:32:36PM -0400, Tim Gardner wrote:
>> Carol,
>>
>> In Apache httpd.conf we had to put the line:
>>
>> SSLProtocol all -SSLv3
>>
>> in order to get it to work for IE Mac. So now when IE windows users
>> who do not have ssl v2 enabled try to hit the site, they get the
>> message you describe. I'm sure there are other ways of getting it
>> though -- I saw the same page displayed on IE 5.5 with a non-ssl page
>> served from a sun server where there was a problem with the load
>> balancer.
>
>We've discussed issues with MSIE on Mac before, the proper fix appears to
be
>the following:
>
>BrowserMatch "MSIE [1-4]" nokeepalive ssl-unclean-shutdown \
> downgrade-1.0 force-response-1.0
>
>BrowserMatch "MSIE [5-9]" ssl-unclean-shutdown
>
>Apparently MSIE on the Mac doesn't like to have keep alive turned off when
>ssl is turned on.
>
>This appears to work well for MSIE on Windows as well. Turning off SSLv3
>introduces issues with some versions of Netscape.
>
>-Dave
>______________________________________________________________________
>Apache Interface to OpenSSL (mod_ssl) www.modssl.org
>User Support Mailing List [EMAIL PROTECTED]
>Automated List Manager [EMAIL PROTECTED]
>______________________________________________________________________
>Apache Interface to OpenSSL (mod_ssl) www.modssl.org
>User Support Mailing List [EMAIL PROTECTED]
>Automated List Manager [EMAIL PROTECTED]
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
