Do we need to have 'SSLProtocol SSLV2'  to solve this problem? If we do
this, even Netscape browsers will also have to use SSLV2 only. Also, if
you give SSLProtocol twice in httpd.conf, later one overrides the first
one. So, in this case, we'll have 
SSLProtocol +SSLv2 +TLSv1
effectively

Rajidhar Etta 
eComServer, Inc 
770.750.6594 (Till Friday)
609.203.3697 (Cell) 


-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Aaron Gee
Sent: Wednesday, December 05, 2001 9:44 AM
To: [EMAIL PROTECTED]
Subject: Another IE problem



Here is an IE problem that I am having with mod_ssl mod_ssl-2.8.5 and
apache
apache-1.3.22 (stock RH 7.2 install all necessary updates)

When connecting with WIN 98 clients get the famous 'This page cannot be
displayed it may be your network or the fact that we are non-standard
and
enjoy screwing with you....blah...blah....blah';  Windows 2000 machines
and
some people with winnt connect fine.  The version's if IE range from 5.0
to
6.0.  Netscape and Opera connect with no problems.

Log shows the following

[05/Dec/2001 09:25:21 07564] [info]  Connection to child 14 established
(server xxx.xxx.xxx:443, client xxx.xxx.xxx.xxx)
[05/Dec/2001 09:25:21 07564] [info]  Seeding PRNG with 1160 bytes of
entropy
[05/Dec/2001 09:25:21 07564] [info]  Spurious SSL handshake
interrupt[Hint:
Usually just one of those OpenSSL confusions!?]


Have I researched the FAQ : yes I have scoured news groups and have
tried
all of the following with no avail

#In the ssl section of my httpd.conf
#This is there

SetEnvIf User-Agent ".*MSIE.*" \
         nokeepalive ssl-unclean-shutdown \
         downgrade-1.0 force-response-1.0

# I also tried

SSLProtocol SSLv2

#as well as

SSLProtocol all -SSLv3

#Not to mention

SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP

#I still have the following in there because it is highly reccomended

BrowserMatch "MSIE 4\.0b2;" nokeepalive downgrade-1.0 force-response-1.0


This problem wasn't noticed until our last day of testing because most
of
our testers have win2k machines.
Any advice?


Aaron Gee
BestNet of Palm Coast

______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to