On Sat, Nov 05, 2005 at 08:08:14PM +0100, Marc Stern wrote: > It's a bit more complex than that. > > At a certain point, a fix was released for IE 6 to correct the > incompatibility that needed the 'ssl-unclean-shutdown' directive (I guess > it's KB 831167). At this point, we had two different flavours of IE+SSL > floating around. > > Although we can determine if the browser is IE 4, 5, or 6, it seems > impossible to determine if the mentionned fix was applied or not on a IE 6 > browser. > > The biggest problem is that, if you add the directive, the latest versions > of IE 6 cannot establish the SSL session.
I don't think I've seen any report of that before. In what case (and how) does IE6 fail if ssl-unclean-shutdown *is* configured? Do you have a rule set which works with a wider range of browsers than the current default ssl.conf? joe