problems with IE and mod_ssl
am 29.12.2004 06:07:25 von Craig Reesonguys,
I have mod_ssl working on my site.
It works fine with Mozilla/Firefox (regardless of OS), but it refuses to
work with IE. I have googled all the necessary things to get it working
with IE but nothing seems to work.
Logs:
tail -20 /var/log/apache/ssl_engine_log
| 3220: 63 67 69 3f 30 3e 06 09-60 86 48 01 86 f8 42 01
cgi?0>..`.H...B. |
| 3230: 08 04 31 16 2f 68 74 74-70 3a 2f 2f 77 77 77 2e
...1./http://www. |
| 3240: 74 72 75 73 74 63 65 6e-74 65 72 2e 64 65 2f 67
trustcenter.de/g |
| 3250: 75 69 64 65 6c 69 6e 65-73 2f 69 6e 64 65 78 2e
uidelines/index. |
| 3260: 68 74 6d 6c 30 28 06 09-60 86 48 01 86 f8 42 01
html0(..`.H...B. |
| 3270: 0d 04 1b 16 19 54 43 20-54 72 75 73 74 43 65 6e .....TC
TrustCen |
| 3280: 74 65 72 20 43 6c 61 73-73 20 31 20 43 41 30 11 ter Class 1
CA0. |
| 3290: 06 09 60 86 48 01 86 f8-42 01 01 04 04 03 02 00
...`.H...B....... |
| 32a0: 07 30 0d 06 09 2a 86 48-86 f7 0d 01 01 04 05 00
..0...*.H........ |
| 32b0: 03 81 81 00 05 42 52 26-a4 0c 27 01 44 ac 5c 25
......BR&..'.D.\% |
| 32c0: 28 c2 44 42 54 08 b9 1d-c5 3e 6c 59 66 c4 b3 4e
(.DBT....>lYf..N |
| 32d0: 50 a7 f8 f8 96 75 a1 96-75 e8 16 38 a0 cd 5d 6e
P....u..u..8..]n |
| 32e0: fa 79 a7 1b 7b 1d 1e c3- .y..{...
|
+----------------------------------------------------------- ------------
--+
[29/Dec/2004 15:08:03 09262] [debug] OpenSSL: I/O error, 4096 bytes
expected to write on BIO#0864FD10 [mem: 08198D48]
[29/Dec/2004 15:08:03 09262] [debug] OpenSSL: I/O error, 4096 bytes
expected to write on BIO#0864FD10 [mem: 08198D48]
[29/Dec/2004 15:08:03 09262] [trace] OpenSSL: Exit: error in SSLv3 write
certificate B
[29/Dec/2004 15:08:03 09262] [trace] OpenSSL: Exit: error in SSLv3 write
certificate B
[29/Dec/2004 15:08:03 09262] [error] SSL handshake interrupted by system
[Hint: Stop button pressed in browser?!] (System error follows)
[29/Dec/2004 15:08:03 09262] [error] System: Broken pipe (errno: 32)
conf:
LoadModule ssl_module libexec/apache/libssl.so
Listen 80
Listen 443
AddType application/x-x509-ca-cert .crt
AddType application/x-pkcs7-crl .crl
SSLPassPhraseDialog builtin
SSLSessionCache dbm:/var/log/apache/ssl_scache
SSLSessionCacheTimeout 300
SSLMutex file:/var/log/apache/ssl_mutex
SSLRandomSeed startup builtin
SSLRandomSeed connect builtin
SSLLog /var/log/apache/ssl_engine_log
SSLLogLevel debug
Alias /mantis/ "/home/support/mantis/"
Alias /files/ "/home/support/files/"
ServerName support-au.xxxx.com
DocumentRoot /home/support
ServerAlias mantis.xxxx.com.au
ServerAlias mantis.xxxx.xxxx.net
ServerAlias xxxx.xxxx.com.au
ServerAlias xxxx.xxxx.com.au
ServerAlias xxxx.xxxx.com.au
ServerAlias xxxx.xxxx.com.au
ServerAlias xxxx.xxxx.com.au
ServerAlias xxxx.xxxx.com.au
ServerAlias xxxx.xxxx.com.au
ServerAlias xxxx.xxxx.com.au
ServerAlias xxxx.xxxx.com.au
ScriptAlias /cgi-bin/ "/home/support/cgi-bin/"
ErrorLog /var/log/apache/support-error_log
CustomLog /var/log/apache/support-access_log common
Options ExecCGI Includes FollowSymLinks
AllowOverride None
Order allow,deny
Allow from all
SSLEngine on
SSLCipherSuite
ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+e NULL
SSLCertificateFile /etc/apache/ssl.crt/support-au-rsa.crt
SSLCertificateKeyFile /etc/apache/ssl.key/support-au-rsa.key
SSLCertificateChainFile /etc/apache/ssl.crt/ca-bundle.crt
BrowserMatch MSIE nokeepalive ssl-unclean-shutdown downgrade-1.0
force-response-1.0
CustomLog /var/log/apache/ssl_request_log \
"%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
any ideas whats going on?
thanks,
Craig
---
This email and any files transmitted with it are solely intended for the us=
e of the addressee(s) and may contain information that is confidential and =
privileged. If you receive this email in error, please advise us by return=
email immediately. Please also disregard the contents of the email, delet=
e it and destroy any copies immediately.
Computershare Limited and its subsidiaries do not accept liability for the =
views expressed in the email or for the consequences of any computer viruse=
s that may be transmitted with this email.
This email is also subject to copyright. No part of it should be reproduce=
d, adapted or transmitted without the written consent of the copyright owne=
r.
____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org