Hi all

Sorry for the long time I didn't respond to this discussion. But I 
think I know what the problem is. I have not followed the discussion 
very close, so probably my answer is out of scope, but I will give
it a try:

We found out that because of a bug in IE5 (there is a patch for it)
a step up does only work if the MAC algorith is not changed. So it
doe wor if you make a step up from RC4-MD5-EXP to RC4-MD5 but not
from lets say from RC4-MD5-EXP to DES-CBC3-SHA. That means it
depends on the ciphers you allow if it works or not. But after
applying the patch it work for us.

http://support.microsoft.com/support/kb/articles/q249/8/63.asp

best regards

Matthias

+-----------------------------------------------------------------------+
| Matthias Loepfe       Roentgenstr. 22           Phone: +41 1-272 6111 |
| AdNovum Informatik AG CH-8005 Zuerich           Fax:   +41 1-272 6312 |
|                                                                       |
| AdNovum Software Inc. San Mateo, CA 94404       Voice: (650) 525-9322 |
| 1400 Fashion Island Boulevard, Suite 309        Fax:   (650) 525-9324 |
+-----------------------------------------------------------------------+
| E-MAIL :                 mailto:[EMAIL PROTECTED]            |
|                                                                       |
| WWW    :                 http://www.adnovum.ch                        |
|                          https://www.adnovum.ch                       |
+-----------------------------------------------------------------------+
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to