FYI We have a very similar problem only with Netscape browsers whereas IE works fine, We are using Oracle IAS 8i (1.0.1 on NT). Up to now, neither the Oracle support nor modssl-users could help. and this is also true for Natalie ([EMAIL PROTECTED]). (see my postings "Network Error: Connection refused") And accessing the site with 128bit Netscape 4.75 via HTTPS produces a Dr. Watson in Apache.exe, but it continues working (obviously there are 2 Apache processes on WinNT). Only the server admin has to remove all those Dr. Watson windows frequently... Henning > -----Urspr�ngliche Nachricht----- > Von: Kuczborski, Carol L [SMTP:[EMAIL PROTECTED]] > Gesendet am: Dienstag, 7. August 2001 14:32 > An: '[EMAIL PROTECTED]' > Cc: 'Tim Gardner' > Betreff: RE: Intermittent "Page cannot be displayed" and "Cannot find erro r or DNS error" using mod_ssl and IE 5.5 > > As I stated, it is intermittent, but occurs very frequently on all PCs in > both our development environment and in our customer's production > environment. We have even see it happen with both the IE 5.50 and IE 5.0 > browser. There is actually one page on our website I can always produce the > error on. It occurs randomly on the other pages of our website. I have > worked on this issue with Oracle Technical Support for the past week. They > say it has nothing to do with the Oracle 9iAS Portal software we are using > for the web application, since none of this occurs with the Netscape > Browser. They suggested filing a bug report with the mod_ssl module (which > I have) and pose the issue to the discussion forum. > > I saw one other similar bug report in the mod_ssl bug database (PR#528) from > March 2001. But is was unresolved. That person also stated that there > appears to be a timing factor to the problem, occurring more often when > going over a slow connection. I also have been in contact with 4 other > users from the Oracle 9iAS Portal discussion forum with this same problem. > One chose to turn off SSL to get around the problem. The other is requiring > users to use only the Netscape browser. The other two are in the same > situation I am in. We need to get a resolution because or customer must use > the IE browser and SSL due to their security policy. > > The FAQ for mod_ssl does state that "the SSL implementation in some MSIE > versions has some subtle bugs related to the HTTP keep-alive facility and > the SSL close notify alerts on socket connection close. Additionally, the > interaction between SSL and HTTP/1.1 features are problematic with some MSIE > versions too. You have to work-around these problems by forcing > Apache+mod_ssl+OpenSSL to not use HTTP/1.1, keep alive connections or > sending the SSL close notify messages to MSIE clients." The directive they > provide also forces the connection to downgrade to HTTP 1.0. We tried the > directive, but still received the errors. > > Carol Kuczborski > EDS - Enabling Business Solutions > MS A6N-B47 > 13600 EDS Drive > Herndon, VA 20171 > > * phone: +01-703-742-1025 (8-432) > * mailto:[EMAIL PROTECTED] > www.eds.com > > > > -----Original Message----- > From: Tim Gardner [mailto:[EMAIL PROTECTED]] > Sent: Monday, August 06, 2001 7:18 PM > To: [EMAIL PROTECTED] > Cc: Kuczborski, Carol L > Subject: RE: Intermittent "Page cannot be displayed" and "Cannot find > erro r or DNS error" using mod_ssl and IE 5.5 > > > Carol > > Does this happen > on some machines some of the time or > on some machines all of the time or > on all machines some of the time or > on all machines all the time? > > TIm > > >Our users are using Microsoft IE on Windows platforms, none are on > >Macintosh. We tried the fix you mentioned, as also noted in the FAQ for > >mod_ssl under the heading "When I connect via HTTPS to an Apache + mod_ssl > + > >OpenSSL server with Microsoft Internet Explorer (MSIE) I get various I/O > >errors", but it did not work. In fact, we seemed to get more of the > errors. > > > >Any other suggestions? > > > >Carol Kuczborski > >EDS - Enabling Business Solutions > >MS A6N-B47 > >13600 EDS Drive > >Herndon, VA 20171 > > > >* phone: +01-703-742-1025 (8-432) > >* mailto:[EMAIL PROTECTED] > >www.eds.com > > > > > > > >-----Original Message----- > >From: David Rees [mailto:[EMAIL PROTECTED]] > >Sent: Monday, August 06, 2001 6:27 PM > >To: [EMAIL PROTECTED] > >Subject: Re: Intermittent "Page cannot be displayed" and "Cannot find > >error or DNS error" using mod_ssl and IE 5.5 > > > > > >On Mon, Aug 06, 2001 at 02:32:36PM -0400, Tim Gardner wrote: > >> Carol, > >> > >> In Apache httpd.conf we had to put the line: > >> > >> SSLProtocol all -SSLv3 > >> > >> in order to get it to work for IE Mac. So now when IE windows users > >> who do not have ssl v2 enabled try to hit the site, they get the > >> message you describe. I'm sure there are other ways of getting it > >> though -- I saw the same page displayed on IE 5.5 with a non-ssl page > >> served from a sun server where there was a problem with the load > >> balancer. > > > >We've discussed issues with MSIE on Mac before, the proper fix appears to > be > >the following: > > > >BrowserMatch "MSIE [1-4]" nokeepalive ssl-unclean-shutdown \ > > downgrade-1.0 force-response-1.0 > > > >BrowserMatch "MSIE [5-9]" ssl-unclean-shutdown > > > >Apparently MSIE on the Mac doesn't like to have keep alive turned off when > >ssl is turned on. > > > >This appears to work well for MSIE on Windows as well. Turning off SSLv3 > >introduces issues with some versions of Netscape. > > > >-Dave > >______________________________________________________________________ > >Apache Interface to OpenSSL (mod_ssl) www.modssl.org > >User Support Mailing List [EMAIL PROTECTED] > >Automated List Manager [EMAIL PROTECTED] > >______________________________________________________________________ > >Apache Interface to OpenSSL (mod_ssl) www.modssl.org > >User Support Mailing List [EMAIL PROTECTED] > >Automated List Manager [EMAIL PROTECTED] > ______________________________________________________________________ > Apache Interface to OpenSSL (mod_ssl) www.modssl.org > User Support Mailing List [EMAIL PROTECTED] > Automated List Manager [EMAIL PROTECTED] ______________________________________________________________________ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
