What's the underlying OS? SSL Session caching just doesn't seem to work on older Linuxes is what I've discovered, and falling back to SSL2 is one thing.
Another is the Mac IE is very picky and may crap out if a page includes non-SSL content. P. On Fri, Mar 26, 2004 at 12:14:43PM -0500, Randall Perry wrote: > > Just noticed that Mac IE 5 is having problems with ssl connections to my > apache 1.3.29 server. I either get the 'Security failure. Data decryption > error,' or it'll connect but graphics won't load on https pages, and I get > this error in httpd error.log: > > [Fri Mar 26 12:05:06 2004] [error] mod_ssl: SSL handshake interrupted by > system [Hint: Stop button pressed in browser?!] (System error follows) > [Fri Mar 26 12:05:06 2004] [error] System: Connection reset by peer (errno: > 54) > > Found these changes to httpd.conf on searching the list, and implemented > them, but to no avail. Anyone got a solution? > > > > > I just solved it. Do not use an SSLProtocol line. Comment out the > > SetEnvIf line that does nokeepalive for MSIE. Use the following > > instead. > > > > BrowserMatch "MSIE [1-4]" nokeepalive ssl-unclean-shutdown \ > > downgrade-1.0 force-response-1.0 > > BrowserMatch "MSIE [5-9]" ssl-unclean-shutdown > > > > I'm also using this cipher suite line, but the default might work, too: > > > > SSLCipherSuite > > !EXP1024-RC4-SHA:!EXP1024-DES-CBC-SHA:ALL:!ADH:!EXP56:RC4+RSA:+HIGH:+MEDIUM: > > +LOW:+SSLv2:+EXP:+eNULL > > -- > Randall Perry > sysTame > > Xserve Web Hosting/Co-location > Website Development/Promotion > Mac Consulting/Sales > > http://www.systame.com/ > > > ______________________________________________________________________ > Apache Interface to OpenSSL (mod_ssl) www.modssl.org > User Support Mailing List [EMAIL PROTECTED] > Automated List Manager [EMAIL PROTECTED] -------------------------------------------+-----------------------------+ |Peter Burkholder, System Administrator | | |Digital Library for Earth System Education| Email) [EMAIL PROTECTED] | |DLESEŽ -- http://www.dlese.org | Office) +1-303-497-2663 | |DLESE Program Center (DPC) | Fax) +1 303-497-8336 | |UCAR/DPC, P.O. Box 3000 | Pager) +1-303-201-1284 | |Boulder, CO 80307-3000 | or [EMAIL PROTECTED] | |<tt> | | ~~~ ~~ ~~~ __o | | ~~~ ~~~ ~~ _`\<,_ | | ~~~ ~~~ ~~~~ (*)/ (*) </tt>| ______________________________________________________________________ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
