Re: [cobalt-developers] SSL Browsing problems *still*

[Gerald Waugh <gwaugh@xxxxxxxxxxxxxxxxxxxxxxx>]

On Mon, 24 Feb 2003, Bruce Timberlake wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> > For no reason at all, when I am using a SSL site on my RaQ550
> > (legit ssl cert from rackshack) for my account signup process Ill
> > get dns errors "page doent exist" etc.. but if i reload or
> > resubmit, it works. but this can be a hindering problem if a
> > customer puts their info in, and it just gives them an error.. any
> > idea what would be causing this??
>
> Sounds like the familiar old Internet Explorer SSL bug... (or, as I
> prefer, Internet Exploder -- for just such reasons).
>
> Nothing you can do about it, I believe.  Although I _think_ there was
> mention in the archives someplace about a patch to httpd.conf to work
> around it.
>
Mine looks like this ...
 if ($ret=~/^2/o) {
    $PerlConfig .= "Listen $ip:443\n";
    $PerlConfig .= "<VirtualHost $ip:443>\n";
    # ======== begin ie patch  ==========
    $PerlConfig .= "SetEnvIf User-Agent \".*MSIE.*\" \\n";
    $PerlConfig .= " nokeepalive ssl-unclean-shutdown\\n";
    $PerlConfig .= " downgrade-1.0 force-response-1.0\n";
    # ======== end ie patch ===========
    $PerlConfig .= "SSLengine on\n";

Gerald
--
http://frontstreetnetworks.com | http://store.raqware.com
     ICQ 229276628     |    Phone: +1 203 785-0699
Front Street Networks LLC,  229 Front Street, Ste. #C,
New Haven, CT. 06513-3203 United States of America