Here is the combination that did the trick for us: SSLSessionCache shmcb:/usr/local/apache/logs/ssl_scache(1024000) SSLSessionCacheTimeout 600 SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP SetEnvIf ".*MSIE.*" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0
Aaron Gee wrote: > > We tried that also. Below is a short list of the combinations and variations > we have tried > Notice some lines from the conf file do the same as others, just trying all > possibilities > the comments (#) in front are my addition. I have tried almost every > iteration of the following > to get SOMETHING to work. > > Tried all of the following. > > #SSLProtocol SSLv2 > #SSLProtocol all -SSLv3 > #SSLProtocol all > #SSLCipherSuite > ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL > #SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP > > Tried both of these: > > #SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown > #SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown > downgrade-1.0 force-response-1.0 > > Also tried these in various combinations with above: > > #SSLSessionCache none > #SSLSessionCache shmht:logs/ssl_scache(512000) > #SSLSessionCache shmcb:logs/ssl_scache(512000) > #SSLSessionCache shm:logs/ssl_scache(512000) > #SSLSessionCache shmht:logs/ssl_scache > #SSLSessionCache shmcb:logs/ssl_scache > #SSLSessionCache shm:logs/ssl_scache > #SSLSessionCacheTimeout 300 > #SSLMutex file:logs/ssl_mutex > > AG > > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On > Behalf Of Bryan Field-Elliot > Sent: Tuesday, December 18, 2001 12:57 > To: [EMAIL PROTECTED] > Subject: RE: OpenSSL I/O error causing "Page cannot be displayed" in browser > > Sorry you already gave up, but I believe the lines below should fix your > problem (in addition to the SetEnvIf line you already added): > > SSLSessionCache dbm:/var/ssl_cache > SSLSessionCacheTimeout 300 > > (change the path in the first line to one which makes sense on your server) > > ______________________________________________________________________ > Apache Interface to OpenSSL (mod_ssl) www.modssl.org > User Support Mailing List [EMAIL PROTECTED] > Automated List Manager [EMAIL PROTECTED] -- ------------------------------------ Robin P. Blanchard IT Program Specialist Georgia Center for Continuing Ed. fon: 706.542.2404 fax: 706.542.6546 email: [EMAIL PROTECTED] ------------------------------------ ______________________________________________________________________ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
