Re: SSL-Problem with Mac MSIE

2002-04-23 Thread Nisbach, Thomas

Hi David,

there was a discussion in the mod_ssl-group a few weeks
ago. Some solutions/workarounds were discussed.
Robert Allerstorfer ment he found "THE" solution. Last
week one of our clients tried to access our "fixed"
SSL-server via Mac MSIE 5.13 and still had a problem.
The only thing working thing working at our site was
disabling SSLv3.
Additionally here's an extract of one of my contributions
to the mod_ssl-discussion:

Hi,

i found one (unsatisfying) solution:
I disabled SSLv3 by setting

SSLProtocol -SSLv3

If i do this MSIE on Mac runs but i worry about
other browser that would not run anymore :-(

Try also what's posted in
http://www.mail-archive.com/modssl-users@modssl.org/msg13577.html
<<<
-Ursprüngliche Nachricht-
Von: David McInnis [mailto:[EMAIL PROTECTED]]
Gesendet: Dienstag, 23. April 2002 06:01
An: [EMAIL PROTECTED]
Betreff: SSL-Problem with Mac MSIE


Did you ever come up with a fix for this?  I am having the same problem.

Thanks,

David McInnis
__
Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
User Support Mailing List  [EMAIL PROTECTED]
Automated List Manager[EMAIL PROTECTED]



Re: No solution for bug with IE on Mac?

2002-03-28 Thread Nisbach, Thomas

Hi,

i found one (unsatisfying) solution:
I disabled SSLv3 by setting

SSLProtocol -SSLv3

If i do this MSIE on Mac runs but i worry about
other browser that would not run anymore :-(

Try also what's posted in
http://www.mail-archive.com/modssl-users@modssl.org/msg13577.html

Thomas
__
Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
User Support Mailing List  [EMAIL PROTECTED]
Automated List Manager[EMAIL PROTECTED]



SSL-Problem with Mac MSIE

2002-02-26 Thread Nisbach, Thomas

Hi,

i am using a self-signed (but valid) certificate with
'Server: Apache/1.3.14, Interface: mod_ssl/2.7.1,
Library: OpenSSL/0.9.6' and the workarounds for MSIE
in the http.conf:

SetEnvIf User-Agent ".*MSIE.*" \
nokeepalive ssl-unclean-shutdown \
downgrade-1.0 force-response-1.0

Allowed ciphers:
SSLCipherSuite
ALL:!ADH:!EXP56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL

But there is still a problem when trying to connect
with MSIE 5.13 on Macintosh (compatible; MSIE 5.13; Mac_PowerPC).
Here's my SSL-Log:

[info]  Connection to child 0 established (server x.x.x:443, client x.x.x.x)
[info]  Seeding PRNG with 1160 bytes of entropy
[error] SSL handshake interrupted by system [Hint: Stop button pressed in
browser?!] 
(System error follows)
[error] System: Connection reset by peer (errno: 104)

Becaus MSIE 5.13 is the latest MSIE on Mac i need a solution/workaround
for this problem. Any ideas?

Thomas
__
Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
User Support Mailing List  [EMAIL PROTECTED]
Automated List Manager[EMAIL PROTECTED]