Re: [cobalt-users] ssl-problem on raq4

["Hostmaster : Beyond2K" <Hostmaster@xxxxxxxxxxxxxx>]

Sebastian,

This a copy of a mail I sent some months ago on this exact subject.

The problem lies within modssl.

I have included the line from our httpd.conf, I did not wish to include this fix in the perl config section to reduce work done by
this module unnecessarily and also this is where the documentation on the problem said to place it. I include this line in the
virtualhost section for any site using SSL. Below is the line used (the centre line) in my httpd.conf, the lines above and below are
simply to show it's position:
==========
AliasMatch ^/~([^/]+)(/(.*))? /home/sites/site9/users/$1/web/$3
SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0
AddHandler cgi-wrapper .cgi
==========

The link to the documented problem on modssl's site provided on the post in the archives is now dead - please see
http://www.modssl.org/docs/2.8/ssl_faq.html#ToC49 for current info on this problem - there are additional fixes for export browsers
etc. you may want to try.

The only other thing to mention is we run OpenSSH on the RAQ4's and have updated OpenSSL - the fix in place did however function
before this was done.

Do remember to restart httpd after amending your httpd.conf using:
==========
/etc/rc.d/init.d/httpd restart
==========

Good luck

Brett
Beyond2K - Webmaster
---------------------------------------------
The World's premier mobile phone boutique
With free SMS & free personal No's
www.b2kcomms.co.uk


----- Original Message -----
From: "Sebastian Mork" <sebastian@xxxxxxxx>
To: <cobalt-users@xxxxxxxxxxxxxxx>
Sent: Friday, August 03, 2001 1:14 PM
Subject: AW: [cobalt-users] ssl-problem on raq4


> hello,
>
> I read some articles now and the solution should be adding the following
> three lines to the http.conf-file.
>
> I tried this out, but after restarting apache, ssl-conections didn't work
> any longer.
>
> $PerlConfig .= "SetEnvIf User-Agent \".*MSIE.*\" \\n";
> $PerlConfig .= "nokeepalive ssl-unclean-shutdown \\n";
> $PerlConfig .= "downgrade-1.0 force-response-1.0\n";
>
> does onybody know this problem?
> (the problem was that on https-connections on our cobalt raq4 can not be
> established using internet explorer. I always have to reload the pages:(
>
>
> --
> Mit smarten Grüssen - Sebastian Mork
>
> SMARTMEDIA - internet concept & design
> Zürich - Berlin
>
> Lützowstrasse 102/104 - 10785 Berlin
> Tel: +49 30 2579 8280 - Fax: +49 30 2579 8282
>
> http://www.smartmedia.ch/
>
> -----Ursprüngliche Nachricht-----
> Von: cobalt-users-admin@xxxxxxxxxxxxxxx
> [mailto:cobalt-users-admin@xxxxxxxxxxxxxxx]Im Auftrag von Sebastian Mork
> Gesendet: Freitag, 3. August 2001 13:18
> An: cobalt-users@xxxxxxxxxxxxxxx
> Betreff: [cobalt-users] ssl-problem on raq4
>
>
> hello,
>
> I have a problem with one of our raq4 and ssl.
>
> some parts of a site use https. the problem is, that when I submit a page
> via https I often have to reload the page.
> that doiesnt happen every time, but nearly.
>
> I read something about that problem and people said its an apache-problem
> and you have to get an apache_update.
>
> thats one msg I found:
> http://list.cobalt.com/pipermail/cobalt-developers/2001-January/003482.html
>
>
> my question is now: (I hope, someone can help me)
> is the problem an apache-problem and which update do I need? how can I get
> info about the currently installed apache_version?
>
> and... did anybody made experiences about the problem, will an update fix
> it??
>
> sebastian mork
>
>
> --
> Mit smarten Grüssen - Sebastian Mork
>
> SMARTMEDIA - internet concept & design
> Zürich - Berlin
>
> Lützowstrasse 102/104 - 10785 Berlin
> Tel: +49 30 2579 8280 - Fax: +49 30 2579 8282
>
> http://www.smartmedia.ch/
>
> _______________________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> To Subscribe or Unsubscribe, please go to:
> http://list.cobalt.com/mailman/listinfo/cobalt-users
>
> _______________________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> To Subscribe or Unsubscribe, please go to:
> http://list.cobalt.com/mailman/listinfo/cobalt-users
>