Aaron,
We had the same problem when using Apache 1.3.20 with modssl 2.8.4/OpenSSL
0.9.5a.
Following the advice from this list, I added the lines below to the conf
file (it didn't help):
BrowserMatch "MSIE [1-4]" nokeepalive \
ssl-unclean-shutdown \
downgrade-1.0 \
force-response-1.0
BrowserMatch "MSIE [5-9]" ssl-unclean-shutdown
BrowserMatch "Mozilla/4..*PC)" nokeepalive \
downgrade-1.0 \
force-response-1.0
SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXPORT
Adding the following two lines solved the problem though:
SSLSessionCache shm:/var/log/http/ssl_gcache_data(512000)
SSLSessionCacheTimeout 300
and the setup has been working ever since (about 6 months).
HTH,
- Alex
>Here is an IE problem that I am having with mod_ssl mod_ssl-2.8.5 and
>apache
>apache-1.3.22 (stock RH 7.2 install all necessary updates)
>
>When connecting with WIN 98 clients get the famous 'This page cannot be
>displayed it may be your network or the fact that we are non-standard and
>enjoy screwing with you....blah...blah....blah'; Windows 2000 machines and
>some people with winnt connect fine. The version's if IE range from 5.0 to
>6.0. Netscape and Opera connect with no problems.
>
>Log shows the following
>
>[05/Dec/2001 09:25:21 07564] [info] Connection to child 14 established
>(server xxx.xxx.xxx:443, client xxx.xxx.xxx.xxx)
>[05/Dec/2001 09:25:21 07564] [info] Seeding PRNG with 1160 bytes of
>entropy
>[05/Dec/2001 09:25:21 07564] [info] Spurious SSL handshake interrupt[Hint:
>Usually just one of those OpenSSL confusions!?]
>
>
>Have I researched the FAQ : yes I have scoured news groups and have tried
>all of the following with no avail
>
>#In the ssl section of my httpd.conf
>#This is there
>
>SetEnvIf User-Agent ".*MSIE.*" \
> nokeepalive ssl-unclean-shutdown \
> downgrade-1.0 force-response-1.0
>
># I also tried
>
>SSLProtocol SSLv2
>
>#as well as
>
>SSLProtocol all -SSLv3
>
>#Not to mention
>
>SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP
>
>#I still have the following in there because it is highly reccomended
>
>BrowserMatch "MSIE 4\.0b2;" nokeepalive downgrade-1.0 force-response-1.0
_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
