I have the SSLCipherSuite and SetEnvIf settings your describe, and it has
completely stopped on my setup (solaris, apache 1.3.20, modssl 2.8.4), aside
from the aforementioned file upload. If you search the mail archives, you'll
find alternative settings, basically variations of these settings, that
other people have had success with.
>From what I can remember(please check), some alternatives include replacing
your SetEnvIf with the following lines:
BrowserMatch "MSIE [1-4]" nokeepalive ssl-unclean-shutdown \
downgrade-1.0 force-response-1.0
BrowserMatch "MSIE [5-9]" ssl-unclean-shutdown
This solves some Mac IE 5.0 problems, and lets 5.x browsers enjoy the
benefits/speed of 1.1 keepalive...
Also, make sure you have SSLSessionCache enabled. MSIE apparently doesn't
like not having that.
Again, I encourage you to do your own searching through the mailing list
archives. There is a lot of good information there...
<http://marc.theaimsgroup.com/?l=apache-modssl>
--pete
-----Original Message-----
From: Glen S Mehn [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, October 31, 2001 10:08 AM
To: [EMAIL PROTECTED]
Subject: RE: IE discards pages once a while
Pete:
What if you have these options set:
SSLCipherSuite
ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
and
SetEnvIf User-Agent ".*MSIE.*" \
nokeepalive ssl-unclean-shutdown \
downgrade-1.0 force-response-1.0
and you've even tried
SSLProtocol all -SSLv3
which minimize, but don't completely stop, the behaviour? Any ideas? (it
still invariably occurs on IE5.x)
glen
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Peter Morelli
Sent: Wednesday, October 31, 2001 09:21 AM
To: '[EMAIL PROTECTED]'
Subject: RE: IE discards pages once a while
This is a known problem.
>From the modssl FAQ:
<http://www.modssl.org/docs/2.8/ssl_faq.html#ToC49>
Search the mailing list archives for MSIE, broken browser, for further
points.
The fix above works for everything except SSL file uploads. You can enable
that on the client side by unchecking Tools->Internet Options->Show Friendly
HTTP error pages, at least for IE 5.5. On the server side, it looks like
file uploads aren't downgraded correctly per the fix if that option is
enabled...
--pete
-----Original Message-----
From: Henning Sittler [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, October 31, 2001 5:52 AM
To: '[EMAIL PROTECTED]'
Subject: RE: IE discards pages once a while
I have older versions of apache and mod_ssl and I'm having the same
problem... I thought I was going crazy.
Everything works fine, and then all of a sudden I'll refresh a page or click
a link and I get the same 'page not found' msg you are getting. For me this
problem occurs about two or maybe three times per day, while the rest of the
time my ssl vhost works just fine. Again, I have found no error msgs in any
of my logs to indicate any problem related to this.
I'm also trying to figure out how to upgrade my apache properly in the
quickest way so my public server has as little downtime as possible. I
thought that upgrading apache might fix the problem, but it looks like you
are stuck in the same situation with a newer version.
Have you tried any other browsers? I get this problem with different
browsers on different OS's. So I suspect it's not the browser.
Henning Sittler
www.inscriber.com
-----Original Message-----
From: Peter Vinnemeier [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, October 31, 2001 3:24 AM
To: [EMAIL PROTECTED]
Subject: IE discards pages once a while
Hi @ll,
I have apache 1.3.22 with mod_ssl 2.8.5 and php 4.0.6 installed on RH7.1
with self signed certificates.
When accessing the site it usually works fine, but once a while I get the
IE error "The page cannot be displayed, server or dns not found". The
apache access and error logs do not show anything. When going back and
pressing the same link again it works fine again. The problem occurs with
IE5 and IE5.5 and it not really reproducable on cetrain actions.
Does anybody have a clue?
Thanks a lot in advance
Peter
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
