Owen,

Thanks for the reply.

I sincerely hope that this is not a problem with POST'ing from IE. That
would mean that things like file uploads would not be possible via SSL.

One thing that I didn't try (that I really should have before asking for
help) is enabling the hacks for ie:

SetEnvIf User-Agent ".*MSIE.*" \
         nokeepalive ssl-unclean-shutdown \
         downgrade-1.0 force-response-1.0

I just did this, and I havn't experienced the problem yet. I will keep the
list posted.

Thanks,
Tim
----- Original Message -----
From: "Owen Boyle" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, September 10, 2001 7:56 AM
Subject: Re: Weird IE Problem


> Tim Pushor wrote:
> >
> > There is a first page, which POSTS form data to a second page. When I
click
> > the submit button on the first page, IE warns that we are about to leave
the
> > secure area. After clicking OK IE gives the famous 'can'd find server or
dns
> > error' message.
> >
> > If you look in the address field of IE, the proper https:// address (for
the
> > second page) is in it. If I click reload, repost the form data, it
works. It
> > then will work every time after that until IE has been shut down
completely,
> > then on the first invocation of the first page it happens again.
>
> There have been other reports like this recently. The common factor
> seems to be a POST request under SSL.
>
> I have a suspicion that the problem is to do with the POST request. When
> you submit a form with POST, the server gets a message that says "I'd
> like to execute the CGI program - the data will be along in a separate
> packet, in a minute..."
>
> It could be that the data packet containing the POST data is failing the
> SSL authentication somehow (e.g. not encrypted with the appropriate
> session-key, not identified as coming from the correct client or
> something).
>
> I don't know why this should be so - does anyone have any ideas?
>
> As a test, could you replace your POST with a GET and let us know what
> happens?
>
> Rgds,
>
> Owen Boyle.
> ______________________________________________________________________
> Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
> User Support Mailing List                      [EMAIL PROTECTED]
> Automated List Manager                            [EMAIL PROTECTED]
>

______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to