Do we need to have 'SSLProtocol SSLV2' to solve this problem? If we do this, even Netscape browsers will also have to use SSLV2 only. Also, if you give SSLProtocol twice in httpd.conf, later one overrides the first one. So, in this case, we'll have SSLProtocol +SSLv2 +TLSv1 effectively
Rajidhar Etta eComServer, Inc 770.750.6594 (Till Friday) 609.203.3697 (Cell) -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Aaron Gee Sent: Wednesday, December 05, 2001 9:44 AM To: [EMAIL PROTECTED] Subject: Another IE problem Here is an IE problem that I am having with mod_ssl mod_ssl-2.8.5 and apache apache-1.3.22 (stock RH 7.2 install all necessary updates) When connecting with WIN 98 clients get the famous 'This page cannot be displayed it may be your network or the fact that we are non-standard and enjoy screwing with you....blah...blah....blah'; Windows 2000 machines and some people with winnt connect fine. The version's if IE range from 5.0 to 6.0. Netscape and Opera connect with no problems. Log shows the following [05/Dec/2001 09:25:21 07564] [info] Connection to child 14 established (server xxx.xxx.xxx:443, client xxx.xxx.xxx.xxx) [05/Dec/2001 09:25:21 07564] [info] Seeding PRNG with 1160 bytes of entropy [05/Dec/2001 09:25:21 07564] [info] Spurious SSL handshake interrupt[Hint: Usually just one of those OpenSSL confusions!?] Have I researched the FAQ : yes I have scoured news groups and have tried all of the following with no avail #In the ssl section of my httpd.conf #This is there SetEnvIf User-Agent ".*MSIE.*" \ nokeepalive ssl-unclean-shutdown \ downgrade-1.0 force-response-1.0 # I also tried SSLProtocol SSLv2 #as well as SSLProtocol all -SSLv3 #Not to mention SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP #I still have the following in there because it is highly reccomended BrowserMatch "MSIE 4\.0b2;" nokeepalive downgrade-1.0 force-response-1.0 This problem wasn't noticed until our last day of testing because most of our testers have win2k machines. Any advice? Aaron Gee BestNet of Palm Coast ______________________________________________________________________ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED] ______________________________________________________________________ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
