[gtaSAGE-members] Apache/mod_ssl and IE problems.

[Julian C. Dunn]

On Thu, 2003-01-09 at 21:29, Adrian Chung wrote:
> Has anyone ever experienced problems with IE and Apache/mod_ssl?

<snip>

>     --------add this to httpd.conf.ssl -------------
>     SSLProtocol all -SSLv3
>     ----------------------------------------------
> 
>     and the following to horde.conf (in Directory section)
> 
>     SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown
>     downgrade-1.0 force-response-1.0
> 
> I'm going to try it out now, but thought I'd ask if anyone's been down
> this road before.

Yes, I've been down this road before. Those hacks will work... sort of.
However, the SSL implementation in certain versions of IE is
fundamentally broken. No amount of hackery can fix the fact that you
will probably continue to have problems.

If you search the mod_ssl-users mailing list you will probably find many
folks saying the same thing.

- Julian

-- 
[    Julian C. Dunn <jdunn@aquezada.com> * <julian@dreaming.org>    ]
[   WWW: http://www.aquezada.com/staff/julian/  * PGP: 0xFDC205B9   ]
[      "let's have a god who likes to party" - disappear fear       ]