Re: [cobalt-developers] SSL Issue with IE?

[Gerald Waugh <gwaugh@xxxxxxxxxxxxxxxxxxxxxxx>]

On Wed, 20 Feb 2002, Brian W. Horner wrote:
> Hello All,
> 
> I have several RaQ4r's with 128 bit certificates from VeriSign for our
> shopping cart systems. On both of them we have issues with "Page can not be
> displayed" errors when Internet Explorer users are either adding products to
> the cart or just browsing pages under https://. (I haven't had a reported
> case of this happening under Netscape.) If they use the back button and try
> the link again, it works fine. It seems like a timing issue with the server
> but could be related to our cgi based shopping cart.? (We use the same one
> on both servers) Is there a way to tweak with the SSL configuration setting
> outside the gui?

look in httpd.conf find the following section, I have forgotten who originally
fond this, but I believe it came from MS [ anyway it WILL fix it ]

        # Hardcoded, issues with mod_perl and cobalt modules.
        if (/^<\/Virtual/ and (-f "/etc/httpd/ssl/$group")) {
            $ret = ssl_cert_check("/home/sites/$group/certs/");
            if ($ret=~/^2/o) {
                $PerlConfig .= "Listen $ip:443\n";
                $PerlConfig .= "<VirtualHost $ip:443>\n";
#=============== a d d   t h e s e   l  n e s =============
                $PerlConfig .= "SetEnvIf User-Agent \".*MSIE.*\" \\n";
                $PerlConfig .= "        nokeepalive ssl-unclean-shutdown\\n";
                $PerlConfig .= "        downgrade-1.0 force-response-1.0\n";
#=================================================
                $PerlConfig .= "SSLengine on\n";
 --
Gerald Waugh