Hi all,

system:  Solaris 7 sparc
Apache:  1.3.27
ModSSL:  2.8.12
OpenSSL: 0.9.7a

Is anyone else experiencing any difficulty with IE5.x and the latest
apache/mod_ssl ? My current live system is Apache/1.3.26 ModSSL/2.8.10
OpenSSL 0.9.6e-engine. I'm using an Ncipher SSL accelerator with chil
engine. All is working fine.

I have the User-Agent ".*MSIE.*" work around in place.
I have a SSLSessionCache and my SSLSessionCacheTimeout is 300.

When I upgrade to the newest componants I get intermittent IE "Page cannot
be displayed" problems. I've been sniffing the connection, but I have not
been able to identify the problem yet. It doesn't seem to occur on an
initial connection, when IE sends the hello using SSLv2, but on subsequent
connections when IE has the certificate and uses SSLv3 for the hello.

The Initial connection always seems to work:

Client -> server  SSLv2  Client Hello
Server -> client  SSLv3  Server Hello, Certificate
Client -> server  SSLv3  Client key exchange, Change cipher, handshake
Server -> client  SSLv3  Change cipher, handshake
Server <> client  SSLv3  Data

However following connections may fail:

Client -> server  SSLv3  Client Hello
Server -> client  SSLv3  Server Hello, Change cipher, handshake

        At this point either:
                IE closes the connection.
        OR:
                The handshake continues.

Client -> server  SSLv3  Change cipher, handshake
Server <> client  SSLv3  Data

Any ideas anyone ??
Thanks in advance,

Mark
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to