We have fixed the problem with the addition of the SSLvl3 line from the FAQ
that reverts the connection to Lvl 2.
And run into a new error later in the buying process in MSIE 4.5 and before.

"Identity Certificate uses an Unknown Signature Algorythm"
and MSIE 3.00 doesn't connect at all.

Any ideas on further server changes to fix this new one?

Thanks
DW

David Waldron wrote:

> I have been researching the problem for several days and have
> run into the limits of my knowledge on Apache and ssl.
>
> We have updated our software to:
>
> Apache 1.3.14
> mod_ssl 2.7.0-1.3.14
> openssl 0.9.5a
>
> and have modified the config file with:
>
> SetEnvIf User-Agent ".*MSIE.*" \
> nokeepalive ssl-unclean-shutdown \
> downgrade-1.0 force-response-1.0
>
> and
>
> SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP
>
> As stated in the FAQ and several messages.
>
> We have a verisign certificate on https://www.darkstardesign.com and
> reference it to another domain name(crazycardboarddecor.com) for use in
> the shopping cart by the url
> https://www.darkstardesign.com/kraftables/cgi-bin/comcart20/comcartp.pl
> This setup works perfectly for secure cart connections in IE 5 and
> Netscape. When we access in MSIE 4.5 and before, we get the error
> "Security Failure. The Server Reply is Invalid"
>
> The error log on darkstardesign.com is:
> [Sat Oct 14 11:01:28 2000] [error] mod_ssl: SSL handshake interrupted by
>
> system [Hint: Stop button pressed in browser?!] (System error follows)
> [Sat Oct 14 11:01:28 2000] [error] System: Connection reset by peer
> (errno: 104)
>
> The error log on crazycardboarddecor.com is(for the same event):
> [Sat Oct 14 14:52:52 2000] [error] [client 24.6.58.31] File does not
> exist: /home/kraftables/public_html/html/none
> [Sat Oct 14 14:52:52 2000] [error] [client 24.6.58.31] File does not
> exist: /home/kraftables/public_html/404.html
>
> Does anyone have any quick advice on where to procede from here?
>
> Thanks,
> David W
>
> end

-

begin:vcard 
n:Waldron;David
tel;cell:615-414-0195
tel;fax:615-885-0120
tel;work:615-883-3399
x-mozilla-html:TRUE
url:http://www.darkstardesign.com
org:Darkstar Design, Inc.;E-Commerce Division
adr:;;PO Box 8261;Hermitage;TN;37076;USA
version:2.1
email;internet:[EMAIL PROTECTED]
title:Vice-President
fn:David Waldron
end:vcard

Reply via email to