Hi all
Sorry for the long time I didn't respond to this discussion. But I
think I know what the problem is. I have not followed the discussion
very close, so probably my answer is out of scope, but I will give
it a try:
We found out that because of a bug in IE5 (there is a patch for it)
a step up does only work if the MAC algorith is not changed. So it
doe wor if you make a step up from RC4-MD5-EXP to RC4-MD5 but not
from lets say from RC4-MD5-EXP to DES-CBC3-SHA. That means it
depends on the ciphers you allow if it works or not. But after
applying the patch it work for us.
http://support.microsoft.com/support/kb/articles/q249/8/63.asp
best regards
Matthias
+-----------------------------------------------------------------------+
| Matthias Loepfe Roentgenstr. 22 Phone: +41 1-272 6111 |
| AdNovum Informatik AG CH-8005 Zuerich Fax: +41 1-272 6312 |
| |
| AdNovum Software Inc. San Mateo, CA 94404 Voice: (650) 525-9322 |
| 1400 Fashion Island Boulevard, Suite 309 Fax: (650) 525-9324 |
+-----------------------------------------------------------------------+
| E-MAIL : mailto:[EMAIL PROTECTED] |
| |
| WWW : http://www.adnovum.ch |
| https://www.adnovum.ch |
+-----------------------------------------------------------------------+
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]