guys,

I have mod_ssl working on my site.

It works fine with Mozilla/Firefox (regardless of OS), but it refuses to
work with IE. I have googled all the necessary things to get it working
with IE but nothing seems to work.

Logs:
tail -20 /var/log/apache/ssl_engine_log
| 3220: 63 67 69 3f 30 3e 06 09-60 86 48 01 86 f8 42 01
cgi?0>..`.H...B. |
| 3230: 08 04 31 16 2f 68 74 74-70 3a 2f 2f 77 77 77 2e
..1./http://www. |
| 3240: 74 72 75 73 74 63 65 6e-74 65 72 2e 64 65 2f 67
trustcenter.de/g |
| 3250: 75 69 64 65 6c 69 6e 65-73 2f 69 6e 64 65 78 2e
uidelines/index. |
| 3260: 68 74 6d 6c 30 28 06 09-60 86 48 01 86 f8 42 01
html0(..`.H...B. |
| 3270: 0d 04 1b 16 19 54 43 20-54 72 75 73 74 43 65 6e  .....TC
TrustCen |
| 3280: 74 65 72 20 43 6c 61 73-73 20 31 20 43 41 30 11  ter Class 1
CA0. |
| 3290: 06 09 60 86 48 01 86 f8-42 01 01 04 04 03 02 00
..`.H...B....... |
| 32a0: 07 30 0d 06 09 2a 86 48-86 f7 0d 01 01 04 05 00
.0...*.H........ |
| 32b0: 03 81 81 00 05 42 52 26-a4 0c 27 01 44 ac 5c 25
.....BR&..'.D.\% |
| 32c0: 28 c2 44 42 54 08 b9 1d-c5 3e 6c 59 66 c4 b3 4e
(.DBT....>lYf..N |
| 32d0: 50 a7 f8 f8 96 75 a1 96-75 e8 16 38 a0 cd 5d 6e
P....u..u..8..]n |
| 32e0: fa 79 a7 1b 7b 1d 1e c3-                         .y..{...
|
+-----------------------------------------------------------------------
--+
[29/Dec/2004 15:08:03 09262] [debug] OpenSSL: I/O error, 4096 bytes
expected to write on BIO#0864FD10 [mem: 08198D48]
[29/Dec/2004 15:08:03 09262] [debug] OpenSSL: I/O error, 4096 bytes
expected to write on BIO#0864FD10 [mem: 08198D48]
[29/Dec/2004 15:08:03 09262] [trace] OpenSSL: Exit: error in SSLv3 write
certificate B
[29/Dec/2004 15:08:03 09262] [trace] OpenSSL: Exit: error in SSLv3 write
certificate B
[29/Dec/2004 15:08:03 09262] [error] SSL handshake interrupted by system
[Hint: Stop button pressed in browser?!] (System error follows)
[29/Dec/2004 15:08:03 09262] [error] System: Broken pipe (errno: 32)

conf:
LoadModule ssl_module libexec/apache/libssl.so
<IfDefine SSL>
Listen 80
Listen 443
</IfDefine>
<IfDefine SSL>
AddType application/x-x509-ca-cert .crt
AddType application/x-pkcs7-crl    .crl
</IfDefine>
<IfModule mod_ssl.c>
SSLPassPhraseDialog  builtin
SSLSessionCache         dbm:/var/log/apache/ssl_scache
SSLSessionCacheTimeout  300
SSLMutex  file:/var/log/apache/ssl_mutex
SSLRandomSeed startup builtin
SSLRandomSeed connect builtin
SSLLog      /var/log/apache/ssl_engine_log
SSLLogLevel debug
</IfModule>
<IfDefine SSL>
Alias /mantis/ "/home/support/mantis/"
Alias /files/ "/home/support/files/"
<VirtualHost _default_:443>
        ServerName support-au.xxxx.com
        DocumentRoot /home/support
        ServerAlias mantis.xxxx.com.au
        ServerAlias mantis.xxxx.xxxx.net
        ServerAlias xxxx.xxxx.com.au
        ServerAlias xxxx.xxxx.com.au
        ServerAlias xxxx.xxxx.com.au
        ServerAlias xxxx.xxxx.com.au
        ServerAlias xxxx.xxxx.com.au
        ServerAlias xxxx.xxxx.com.au
        ServerAlias xxxx.xxxx.com.au
        ServerAlias xxxx.xxxx.com.au
        ServerAlias xxxx.xxxx.com.au
        ScriptAlias /cgi-bin/ "/home/support/cgi-bin/"
        ErrorLog /var/log/apache/support-error_log
        CustomLog /var/log/apache/support-access_log common
<Directory "/home/support">
        Options ExecCGI Includes FollowSymLinks
        AllowOverride None
        Order allow,deny
        Allow from all
</Directory>
SSLEngine on
SSLCipherSuite
ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
SSLCertificateFile /etc/apache/ssl.crt/support-au-rsa.crt
SSLCertificateKeyFile /etc/apache/ssl.key/support-au-rsa.key
SSLCertificateChainFile /etc/apache/ssl.crt/ca-bundle.crt
BrowserMatch MSIE nokeepalive ssl-unclean-shutdown downgrade-1.0
force-response-1.0
CustomLog /var/log/apache/ssl_request_log \
          "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
</VirtualHost>                                  
</IfDefine>

any ideas whats going on?

thanks,

Craig



---
This email and any files transmitted with it are solely intended for the use of 
the addressee(s) and may contain information that is confidential and 
privileged.  If you receive this email in error, please advise us by return 
email immediately.  Please also disregard the contents of the email, delete it 
and destroy any copies immediately.
Computershare Limited and its subsidiaries do not accept liability for the 
views expressed in the email or for the consequences of any computer viruses 
that may be transmitted with this email.
This email is also subject to copyright.  No part of it should be reproduced, 
adapted or transmitted without the written consent of the copyright owner.

______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      modssl-users@modssl.org
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to