[prev in list] [next in list] [prev in thread] [next in thread] 

List:       apache-modssl
Subject:    IE 4.01 [german]
From:       "Roman Gerteis" <roman () gerteis ! com>
Date:       2000-05-28 16:56:39
[Download RAW message or body]

Hay everybody,

I'm having a strange prob with my Apache/openSSL/mod_ssl:
Versions: Apache 1.3.12
OpenSSL: 0.9.5a
ModSSL: 2.6.2 AND 2.6.4 (for Apache 1.3.12)

the following occures.
Any german Internet Explorer in the Version Numbers 4.01.xxxxx up to 5.0 no
matter if it has an 40bit or 128bit Chipher, is showing my Certificate (I'm
my own CA). Looks good. If you accept the Cert the Browser shows: "Seite
kann nicht angezeigt werden." Which means site can't be display.
I attached some snips of my system configuration. I created my own CA key,
making a own Server key and the corresponding Certs. I everything like it is
said in the howto's and tutorials. Whatever I do. These f***ing german
versions of IE (And only this) don't work. It's working with every other
Browser very well btw.

My Testurl is: https://nuwonder.ghb.fh-furtwangen.de

The following ist the config in httpd.conf:
--snip
<IfModule mod_ssl.c>
        SSLPassPhraseDialog builtin
        SSLSessionCacheTimeout  300
        SSLRandomSeed startup builtin
        SSLLog logs/ssl_engine_log
        SSLLogLevel     info
        SSLProtocol ALL
        SSLCipherSuite
ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
</IfModule>

<VirtualHost 141.28.228.130:443>
        ServerAdmin root@nuwonder.ghb.fh-furtwangen.de
        DocumentRoot /www/htdocs/es
        ServerName nuwonder.ghb.fh-furtwangen.de
        CustomLog /var/log/apache/es_ssl_log common
        ErrorLog /var/log/apache/es_ssl_error_log
        SSLEngine on
        SSLCertificateFile /etc/apache/ssl.nuwonder/nuwonder.crt
        SSLCertificateKeyFile /etc/apache/ssl.nuwonder/nuwonder.key.unsecure
        SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclear-shutdown
</VirtualHost>
--snip


The following is the ssl_log entry I get.
--snip
[28/May/2000 17:53:01 13180] [info]  Seeding PRNG with 0 bytes of entropy
[28/May/2000 17:53:02 13180] [info]  Connection: Client IP: 141.28.228.194,
Protocol: SSLv3, Cipher: RC4-MD5 (128/128 bits)
[28/May/2000 17:53:02 13180] [info]  Connection to child 7 closed with
standard shutdown (server nuwonder.ghb.fh-furtwangen.de:443, client
141.28.228.194)
[28/May/2000 17:53:07 13135] [info]  Connection to child 1 established
(server nuwonder.ghb.fh-furtwangen.de:443, client 141.28.228.194)
[28/May/2000 17:53:07 13135] [info]  Seeding PRNG with 0 bytes of entropy
[28/May/2000 17:53:07 13135] [info]  Spurious SSL handshake interrupt[Hint:
Usually just one of those OpenSSL confusions!?]
--snip


Does anybody know what to do? I'm pretty close at giving up.
Regards
roman

Roman Gerteis - c o m p u t e r  n e t w o r k i n g [FHF]
ICQ:  42160345 | Mail: roman@gerteis.com
---
$ man woman
No manual entry for woman
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      modssl-users@modssl.org
Automated List Manager                            majordomo@modssl.org

[prev in list] [next in list] [prev in thread] [next in thread]