Hi,

thanks for the tips on how to create a situation where browsers which cannot handle 
128 bits encryption are redirected to an upgrade message.

I get the idea of using the rewrite rules, but I'm still stuck.

I have a separate directory /var/www/messages configured with rewriteEngine off, 
aliased as /messages, but browsers without the 128 bits encryption capability don't 
seem to be able to access it, even if I allow all SSLCipherSuite.

Even if I get rid of the SSLRequire %{SSL_CIPHER_USEKEYSIZE} >= 128 completely, 
browsers without 128 bits encryption cannot access anything.

I do have a "global server certificate" from verisign, with an intermediate 
certificate installed with SSLCACertificateFile, could that have something to do with 
it?

Cheers,
Jeroen.
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to