One suggestion might be to drop the high security in apache and instead use a 
script to detect what encryption is requested then redirect as 
appropriate...possible even having the location redirected too using apache 
strong detect as a second measure.

Nick


Quoting "Bray, Mike" <[EMAIL PROTECTED]>:

> Hi
> 
> We are using strong encryption with Apache (1.3.19) mod_ssl (2.8.5),
> openssl
> (0.9.5).  We have the SSLCipher set to HIGH:+MEDIUM
> 
> This rejects weak browsers, i.e. less than 128 bit encryption but it
> does it
> with a 'PAGE CAN NOT BE DISPLAYED'.  I have looked at the logs and
> have
> found the error in client hello (no ciphers to share) but nothing goes
> into
> the Apache access logs.
> 
> What we want to do is display a more friendly page helping the user
> upgrade
> their browser.  Can you recommend any way to catch this error and output
> an
> error page.
> 
> Regards
> Mike Bray


______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to