hi all,
i use Solaris7 Apache/1.3.17 mod_ssl/2.8.0 and a 128bit verisign certificate
IE5.00.3103.1000_56bit is working
IE5.00.2014.0216_40bit is not working
can anyone help me??
thx
jochen
----------------------------------------------------------------------------
---------
this is my httpd.conf
<IfModule mod_setenvif.c>
BrowserMatch "Mozilla/2" nokeepalive
BrowserMatch "MSIE 4\.0b2;" nokeepalive downgrade-1.0 force-response-1.0
BrowserMatch "RealPlayer 4\.0" force-response-1.0
BrowserMatch "Java/1\.0" force-response-1.0
BrowserMatch "JDK/1\.0" force-response-1.0
</IfModule>
<IfDefine SSL>
AddType application/x-x509-ca-cert .crt
AddType application/x-pkcs7-crl .crl
</IfDefine>
<IfModule mod_ssl.c>
SSLPassPhraseDialog builtin
SSLSessionCache dbm:/usr/apache/logs/ssl_scache
SSLSessionCacheTimeout 300
SSLMutex file:/usr/apache/logs/ssl_mutex
SSLRandomSeed startup builtin
SSLRandomSeed connect builtin
SSLLog /usr/apache/logs/ssl_engine_log
SSLLogLevel debug
</IfModule>
<IfDefine SSL>
<VirtualHost _default_:443>
DocumentRoot "******"
ServerName prod-www1
ServerAdmin root@prod-www1
ErrorLog /usr/apache/logs/error_log
TransferLog /usr/apache/logs/access_log
SSLEngine on
SSLCipherSuite ALL:@STRENGTH
SSLCertificateFile /usr/local/ssl/certs/www.***.de.crt
SSLCertificateKeyFile /usr/local/ssl/private/www.***.de.key
SSLCertificateChainFile /usr/apache/conf/ssl.crt/chain.crt
<Files ~ "\.(cgi|shtml|phtml|php3?)$">
SSLOptions +StdEnvVars
</Files>
<Directory "/usr/apache/cgi-bin">
SSLOptions +StdEnvVars
</Directory>
SetEnvIf User-Agent ".*MSIE.*" \
nokeepalive ssl-unclean-shutdown \
downgrade-1.0 force-response-1.0
CustomLog /usr/apache/logs/ssl_request_log \
"%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
</VirtualHost>
</IfDefine>
----------------------------------------------------------------------------
------------
this is the IE5.00.2014.0216_40bit log
[11/Jun/2001 13:21:41 12309] [info] Connection to child 0 established
(server prod-www1:443, client 213.61.74.66)
[11/Jun/2001 13:21:41 12309] [info] Seeding PRNG with 1160 bytes of entropy
[11/Jun/2001 13:21:41 12309] [trace] OpenSSL: Handshake: start
[11/Jun/2001 13:21:41 12309] [trace] OpenSSL: Loop: before/accept
initialization
[11/Jun/2001 13:21:41 12309] [trace] OpenSSL: Loop: SSLv3 read client hello
A
[11/Jun/2001 13:21:41 12309] [trace] OpenSSL: Loop: SSLv3 write server hello
A
[11/Jun/2001 13:21:41 12309] [trace] OpenSSL: Loop: SSLv3 write certificate
A
[11/Jun/2001 13:21:41 12309] [trace] OpenSSL: Loop: SSLv3 write key exchange
A
[11/Jun/2001 13:21:41 12309] [trace] OpenSSL: Loop: SSLv3 write server done
A
[11/Jun/2001 13:21:41 12309] [trace] OpenSSL: Loop: SSLv3 flush data
[11/Jun/2001 13:21:41 12309] [trace] OpenSSL: Loop: SSLv3 read client key
exchange A
[11/Jun/2001 13:21:41 12309] [trace] OpenSSL: Loop: SSLv3 read finished A
[11/Jun/2001 13:21:41 12309] [trace] OpenSSL: Loop: SSLv3 write change
cipher spec A
[11/Jun/2001 13:21:41 12309] [trace] OpenSSL: Loop: SSLv3 write finished A
[11/Jun/2001 13:21:41 12309] [trace] OpenSSL: Loop: SSLv3 flush data
[11/Jun/2001 13:21:41 12309] [trace] Inter-Process Session Cache:
request=SET status=OK
id=72F4F937879EC36DD62BB3E13D172E62F1DEFE973BAD84D625A68FBD0CC0FED0
timeout=300s (session caching)
[11/Jun/2001 13:21:41 12309] [trace] OpenSSL: Handshake: done
[11/Jun/2001 13:21:41 12309] [info] Connection: Client IP: 213.61.74.66,
Protocol: SSLv3, Cipher: EXP-RC4-MD5 (40/128 bits)
[11/Jun/2001 13:21:41 12309] [trace] OpenSSL: Write: SSL negotiation
finished successfully
[11/Jun/2001 13:21:41 12309] [info] Connection to child 0 closed with
standard shutdown (server prod-www1:443, client 213.61.74.66)
[11/Jun/2001 13:21:55 12310] [info] Connection to child 1 established
(server prod-www1:443, client 213.61.74.66)
[11/Jun/2001 13:21:55 12310] [info] Seeding PRNG with 1160 bytes of entropy
[11/Jun/2001 13:21:55 12310] [trace] OpenSSL: Handshake: start
[11/Jun/2001 13:21:55 12310] [trace] OpenSSL: Loop: before/accept
initialization
[11/Jun/2001 13:21:55 12310] [trace] OpenSSL: Loop: SSLv2 read client hello
A
[11/Jun/2001 13:21:55 12310] [trace] OpenSSL: Loop: SSLv2 write server hello
A
[11/Jun/2001 13:21:55 12310] [trace] OpenSSL: Exit: error in SSLv2 read
client master key A
[11/Jun/2001 13:21:55 12310] [trace] OpenSSL: Exit: error in SSLv2 read
client master key A
[11/Jun/2001 13:21:55 12310] [error] SSL handshake interrupted by system
[Hint: Stop button pressed in browser?!] (System error follows)
[11/Jun/2001 13:21:55 12310] [error] System: Connection reset by peer
(errno: 131)
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
