Re: [cobalt-developers] SSL Issue with IE?

[Matthew Nuzum <cobalt@xxxxxxxxxxxxx>]

On Wed, 2002-02-20 at 12:19, Brian W. Horner wrote:
    Hello All,
    
    I have several RaQ4r's with 128 bit certificates from VeriSign for our
    shopping cart systems. On both of them we have issues with "Page can not be
    displayed" errors when Internet Explorer users are either adding products to
    the cart or just browsing pages under https://. (I haven't had a reported
    case of this happening under Netscape.) If they use the back button and try
    the link again, it works fine. It seems like a timing issue with the server
    but could be related to our cgi based shopping cart.? (We use the same one
    on both servers) Is there a way to tweak with the SSL configuration setting
    outside the gui?
    
    I have searched the archives and can't seem to locate anything regarding
    this issue. <frown>
    
    Thanks in advance for any help you could give me or direction you can point
    me in...
    
    Brian W. Horner
    
Here's a snippet from my httpd.conf file.  I too had this problem. I
found the answer at the openssl website www.openssl.org.
# global ssl setup
<IfModule mod_ssl.c>
SSLSessionCache         dbm:/var/log/httpd/ssl_scache
SSLSessionCacheTimeout  300
SSLMutex                file:/var/log/httpd/ssl_mutex
SSLRandomSeed startup   file:/dev/urandom 512
SSLRandomSeed connect   builtin
# Location of a secondary signing authority certificate. Uncomment and
edit
# the location if necessary if you install a secondary certificate. 
#SSLCACertificateFile /etc/httpd/conf/ca-bundle

#### HERE ARE THE CHANGES
# Changes Added by matt (thanks to Jason and Larry
jbarnes@xxxxxxxxxxxxxx)
# The rest (until next #)goes on a single line
SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown
downgrade-1.0 force-response-1.0

#SSLCipherSuite
ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP 
</IfModule>


Matt Nuzum