Re: [cobalt-users] ssl-problem on raq4

[Dave Robinson <domino27@xxxxxxxxxxxx>]

Re the threads below... It was, I believe to me that  Brett`s advice was directed (Thanks)
My situation was similar  RAQ4 - Thawte 128 bit Super Cert... https pages not loading,  some perl scripts not working without a page
reload on MSIE etc etc
I implemented the code as detailed below... which yielded some significant improvements,  but still had issues with
56 bit SSL versions of MSIE. (Fewer problems with Netscape though)
To cut a long story short I ended up accepting that users of these versions of  MSIE could not be accomodated and warned them to that
effect
."  ...... you will see a "Page Not Found"   Error and be denied access to our secure area.  The versions affected are IE5.002919 + 20"
Browser upgrade instructions and alternative links seem to have done the trick and haven`t had any negative feedback since.
(Just for info... the Thawte site has an excellent live online technical help desk... they checked my pages on several versions of
browser and reported straight back)
Rgds
Dave

Hostmaster : Beyond2K wrote:

> Sebastian,
>
> This a copy of a mail I sent some months ago on this exact subject.
>
> The problem lies within modssl.
>
> I have included the line from our httpd.conf, I did not wish to include this fix in the perl config section to reduce work done by
> this module unnecessarily and also this is where the documentation on the problem said to place it. I include this line in the
> virtualhost section for any site using SSL. Below is the line used (the centre line) in my httpd.conf, the lines above and below are
> simply to show it's position:
> ==========
> AliasMatch ^/~([^/]+)(/(.*))? /home/sites/site9/users/$1/web/$3
> SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0
> AddHandler cgi-wrapper .cgi
> ==========
>
> The link to the documented problem on modssl's site provided on the post in the archives is now dead - please see
> http://www.modssl.org/docs/2.8/ssl_faq.html#ToC49 for current info on this problem - there are additional fixes for export browsers
> etc. you may want to try.
>
> The only other thing to mention is we run OpenSSH on the RAQ4's and have updated OpenSSL - the fix in place did however function
> before this was done.
>
> Do remember to restart httpd after amending your httpd.conf using:
> ==========
> /etc/rc.d/init.d/httpd restart
> ==========
>
> Good luck
>
> Brett
> Beyond2K - Webmaster
> ---------------------------------------------
> The World's premier mobile phone boutique
> With free SMS & free personal No's
> www.b2kcomms.co.uk
>
> ----- Original Message -----
> From: "Sebastian Mork" <sebastian@xxxxxxxx>
> To: <cobalt-users@xxxxxxxxxxxxxxx>
> Sent: Friday, August 03, 2001 1:14 PM
> Subject: AW: [cobalt-users] ssl-problem on raq4
>
> > hello,
> >
> > I read some articles now and the solution should be adding the following
> > three lines to the http.conf-file.
> >
> > I tried this out, but after restarting apache, ssl-conections didn't work
> > any longer.
> >
> > $PerlConfig .= "SetEnvIf User-Agent \".*MSIE.*\" \\n";
> > $PerlConfig .= "nokeepalive ssl-unclean-shutdown \\n";
> > $PerlConfig .= "downgrade-1.0 force-response-1.0\n";
> >
> > does onybody know this problem?
> > (the problem was that on https-connections on our cobalt raq4 can not be
> > established using internet explorer. I always have to reload the pages:(
> >
> >
> > --
> > Mit smarten Grüssen - Sebastian Mork
> >
> > SMARTMEDIA - internet concept & design
> > Zürich - Berlin
> >
> > Lützowstrasse 102/104 - 10785 Berlin
> > Tel: +49 30 2579 8280 - Fax: +49 30 2579 8282
> >
> > http://www.smartmedia.ch/
> >
> > -----Ursprüngliche Nachricht-----
> > Von: cobalt-users-admin@xxxxxxxxxxxxxxx
> > [mailto:cobalt-users-admin@xxxxxxxxxxxxxxx]Im Auftrag von Sebastian Mork
> > Gesendet: Freitag, 3. August 2001 13:18
> > An: cobalt-users@xxxxxxxxxxxxxxx
> > Betreff: [cobalt-users] ssl-problem on raq4
> >
> >
> > hello,
> >
> > I have a problem with one of our raq4 and ssl.
> >
> > some parts of a site use https. the problem is, that when I submit a page
> > via https I often have to reload the page.
> > that doiesnt happen every time, but nearly.
> >
> > I read something about that problem and people said its an apache-problem
> > and you have to get an apache_update.
> >
> > thats one msg I found:
> > http://list.cobalt.com/pipermail/cobalt-developers/2001-January/003482.html
> >
> >
> > my question is now: (I hope, someone can help me)
> > is the problem an apache-problem and which update do I need? how can I get
> > info about the currently installed apache_version?
> >
> > and... did anybody made experiences about the problem, will an update fix
> > it??
> >
> > sebastian mork
> >
> >
> > --
> > Mit smarten Grüssen - Sebastian Mork
> >
> > SMARTMEDIA - internet concept & design
> > Zürich - Berlin
> >
> > Lützowstrasse 102/104 - 10785 Berlin
> > Tel: +49 30 2579 8280 - Fax: +49 30 2579 8282
> >
> > http://www.smartmedia.ch/
> >
>