RE: [cobalt-users] [OT] Comodo SSL Certs on Raq4r

["Ian" <ian@xxxxxxxxxxxxxxxxxxxx>]

Hi Ken,

> I've had this problem with both Thawte and Comodo certs. There are a couple
> of lines you can insert in the httpd.conf to fix it. It's in the Sun
> Knowledgebase.
> 
> The new section will look like:
> 
>         # Hardcoded, issues with mod_perl and cobalt modules.
>         if (/^<\/Virtual/ and (-f "/etc/httpd/ssl/$group")) {
>             $ret = ssl_cert_check("/home/sites/$group/certs/");
>             if ($ret=~/^2/o) {
>                 $PerlConfig .= "Listen $ip:443\n";
>                 $PerlConfig .= "<VirtualHost $ip:443>\n";
>                 # ------------- INSERT THIS CODE -------------
>         $PerlConfig .= "SetEnvIf User-Agent \".*MSIE.*\" \\n";
>         $PerlConfig .= "        nokeepalive ssl-unclean-shutdown \\n";
>         $PerlConfig .= "        downgrade-1.0 force-response-1.0 \n";
>                # ------------- END INSERT -------------------
>                 $PerlConfig .= "SSLengine on\n";
>                 $PerlConfig .= "SSLCertificateFile
> /home/sites/$group/certs/certificate\n";
>                 $PerlConfig .= "SSLCertificateKeyFile
> /home/sites/$group/certs/key\n";
>                 $PerlConfig .= join('', @ssl_conf);
>             } elsif (ssl_cert_check("/home/sites/home/certs/") =~ /^2/ ) {
>                 $PerlConfig .= "Listen $ip:443\n";
>                 $PerlConfig .= "<VirtualHost $ip:443>\n";
> # ------------- INSERT THIS CODE -------------
>         $PerlConfig .= "SetEnvIf User-Agent \".*MSIE.*\" \\n";
>         $PerlConfig .= "        nokeepalive ssl-unclean-shutdown \\n";
>         $PerlConfig .= "        downgrade-1.0 force-response-1.0 \n";
> # ------------- END INSERT -------------------
> 
>                 $PerlConfig .= "SSLengine on\n";
>                 $PerlConfig .= "SSLCertificateFile
> /home/sites/home/certs/certificate\n";
>                 $PerlConfig .= "SSLCertificateKeyFile
> /home/sites/home/certs/key\n";
>                 $PerlConfig .= join('', @ssl_conf);
>             } else {

I think that has done the job.

Thanks alot, much appreciated.....

Mac