Apache 2.0 + mod_ssl problems with IE6 on XP (no SP2)

Apache 2.0 + mod_ssl problems with IE6 on XP (no SP2)

am 07.06.2007 08:08:13 von Mark Beiley

Hello,

Several customers are not able to access my server via HTTPS. Their browser
just sits there, and doesn't display anything. I've determined the common
properties of these cases to be:

Windows XP (all of them without SP2)
Internet Explorer 6

I can see their requests show up fine in my log files, without errors.
These customers can visit other HTTPS sites. My site works fine for the
vast majority of people. I'm stumped on the next step to try and debug
the problem. Any suggestions?

My server configuration:
Apache 2.0.54 with mod_ssl and mod_deflate, running on Windows XP

For an example URL, try: https://www.beileysoftware.com/handy.html

Thanks,
Mark
http://www.beiley.com


____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org

Re: Apache 2.0 + mod_ssl problems with IE6 on XP (no SP2)

am 07.06.2007 15:06:23 von Sven Geisler

Hi Mark,

Do you have KeepALive on in you server config for this browser?

Sven.


Mark Beiley schrieb:
> Hello,
>
> Several customers are not able to access my server via HTTPS. Their
> browser
> just sits there, and doesn't display anything. I've determined the common
> properties of these cases to be:
>
> Windows XP (all of them without SP2)
> Internet Explorer 6
>
> I can see their requests show up fine in my log files, without errors.
> These customers can visit other HTTPS sites. My site works fine for the
> vast majority of people. I'm stumped on the next step to try and debug
> the problem. Any suggestions?
>
> My server configuration:
> Apache 2.0.54 with mod_ssl and mod_deflate, running on Windows XP
>
> For an example URL, try: https://www.beileysoftware.com/handy.html
>
> Thanks,
> Mark
> http://www.beiley.com
>
>
> ____________________________________________________________ __________
> Apache Interface to OpenSSL (mod_ssl) www.modssl.org
> User Support Mailing List modssl-users@modssl.org
> Automated List Manager majordomo@modssl.org

--
Sven Geisler Tel +49.30.921017.81 Fax .50
Senior Developer, AEC/communications GmbH & Co. KG Berlin, Germany
____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org

Re: Apache 2.0 + mod_ssl problems with IE6 on XP (no SP2)

am 07.06.2007 23:35:23 von Mark Beiley

Hi Sven,

Thanks for the reply. I believe I have KeepAlive off for this browser.
In my ssl.conf file I have:

SetEnvIf User-Agent ".*MSIE.*" \
nokeepalive ssl-unclean-shutdown \
downgrade-1.0 force-response-1.0

Thanks,
Mark
http://www.beiley.com



> Hi Mark,
>
> Do you have KeepALive on in you server config for this browser?
>
> Sven.
>
>
> Mark Beiley schrieb:
>> Hello,
>>
>> Several customers are not able to access my server via HTTPS. Their
>> browser
>> just sits there, and doesn't display anything. I've determined the
>> common
>> properties of these cases to be:
>>
>> Windows XP (all of them without SP2)
>> Internet Explorer 6
>>
>> I can see their requests show up fine in my log files, without errors.
>> These customers can visit other HTTPS sites. My site works fine for the
>> vast majority of people. I'm stumped on the next step to try and debug
>> the problem. Any suggestions?
>>
>> My server configuration:
>> Apache 2.0.54 with mod_ssl and mod_deflate, running on Windows XP
>>
>> For an example URL, try: https://www.beileysoftware.com/handy.html
>>
>> Thanks,
>> Mark
>> http://www.beiley.com

____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org

Re: Apache 2.0 + mod_ssl problems with IE6 on XP (no SP2)

am 08.06.2007 08:30:41 von Sven Geisler

Hi Mark,

Did you try Google ?
I guess, the root certificate causes the trouble.

Sven.

Mark Beiley schrieb:
> Hi Sven,
>
> Thanks for the reply. I believe I have KeepAlive off for this browser.
> In my ssl.conf file I have:
>
> SetEnvIf User-Agent ".*MSIE.*" \
> nokeepalive ssl-unclean-shutdown \
> downgrade-1.0 force-response-1.0
>
> Thanks,
> Mark
> http://www.beiley.com
>
>
>
>> Hi Mark,
>>
>> Do you have KeepALive on in you server config for this browser?
>>
>> Sven.
>>
>>
>> Mark Beiley schrieb:
>>> Hello,
>>>
>>> Several customers are not able to access my server via HTTPS. Their
>>> browser
>>> just sits there, and doesn't display anything. I've determined the
>>> common
>>> properties of these cases to be:
>>>
>>> Windows XP (all of them without SP2)
>>> Internet Explorer 6
>>>
>>> I can see their requests show up fine in my log files, without errors.
>>> These customers can visit other HTTPS sites. My site works fine for the
>>> vast majority of people. I'm stumped on the next step to try and debug
>>> the problem. Any suggestions?
>>>
>>> My server configuration:
>>> Apache 2.0.54 with mod_ssl and mod_deflate, running on Windows XP
>>>
>>> For an example URL, try: https://www.beileysoftware.com/handy.html
>>>
>>> Thanks,
>>> Mark
>>> http://www.beiley.com
>
> ____________________________________________________________ __________
> Apache Interface to OpenSSL (mod_ssl) www.modssl.org
> User Support Mailing List modssl-users@modssl.org
> Automated List Manager majordomo@modssl.org

--
Sven Geisler Tel +49.30.921017.81 Fax .50
Senior Developer, AEC/communications GmbH & Co. KG Berlin, Germany
____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org

Re: Apache 2.0 + mod_ssl problems with IE6 on XP (no SP2)

am 08.06.2007 18:13:07 von Mark Beiley

Hi Sven,

Interesting... I hadn't thought of that. I know some other
sites using a Starfield certificate. I'll see if these
customers experience the same problem when they go there.

Thanks for your help!

Mark
http://www.beiley.com


----- Original Message -----
From: "Sven Geisler"
To:
Sent: Thursday, June 07, 2007 11:30 PM
Subject: Re: Apache 2.0 + mod_ssl problems with IE6 on XP (no SP2)


> Hi Mark,
>
> Did you try Google ?
> I guess, the root certificate causes the trouble.
>
> Sven.
>
> Mark Beiley schrieb:
>> Hi Sven,
>>
>> Thanks for the reply. I believe I have KeepAlive off for this browser.
>> In my ssl.conf file I have:
>>
>> SetEnvIf User-Agent ".*MSIE.*" \
>> nokeepalive ssl-unclean-shutdown \
>> downgrade-1.0 force-response-1.0
>>
>> Thanks,
>> Mark
>> http://www.beiley.com
>>
>>
>>
>>> Hi Mark,
>>>
>>> Do you have KeepALive on in you server config for this browser?
>>>
>>> Sven.
>>>
>>>
>>> Mark Beiley schrieb:
>>>> Hello,
>>>>
>>>> Several customers are not able to access my server via HTTPS. Their
>>>> browser
>>>> just sits there, and doesn't display anything. I've determined the
>>>> common
>>>> properties of these cases to be:
>>>>
>>>> Windows XP (all of them without SP2)
>>>> Internet Explorer 6
>>>>
>>>> I can see their requests show up fine in my log files, without errors.
>>>> These customers can visit other HTTPS sites. My site works fine for
>>>> the
>>>> vast majority of people. I'm stumped on the next step to try and debug
>>>> the problem. Any suggestions?
>>>>
>>>> My server configuration:
>>>> Apache 2.0.54 with mod_ssl and mod_deflate, running on Windows XP
>>>>
>>>> For an example URL, try: https://www.beileysoftware.com/handy.html
>>>>
>>>> Thanks,
>>>> Mark
>>>> http://www.beiley.com
>>
>> ____________________________________________________________ __________
>> Apache Interface to OpenSSL (mod_ssl) www.modssl.org
>> User Support Mailing List modssl-users@modssl.org
>> Automated List Manager majordomo@modssl.org
>
> --
> Sven Geisler Tel +49.30.921017.81 Fax .50
> Senior Developer, AEC/communications GmbH & Co. KG Berlin, Germany
> ____________________________________________________________ __________
> Apache Interface to OpenSSL (mod_ssl) www.modssl.org
> User Support Mailing List modssl-users@modssl.org
> Automated List Manager majordomo@modssl.org
>

____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org

Re: Apache 2.0 + mod_ssl problems with IE6 on XP (no SP2)

am 11.06.2007 22:11:04 von Mark Beiley

I've learned that I can fix this problem by not using an external style
sheet.
This only affects IE6 on XP without SP2. Everyone else seems to be able
to view my pages fine, and even these problematic IE6/XP customers can view
pages with external style sheets that are not using HTTPS.

Specifically, if I delete this line from my HTML:

href="https://www.beileysoftware.com/main.css">

then these problematic browsers can view the page fine.

I've also changed the HTML to include the exact contents of the style sheet
inline, and this works
fine. It is only when the style sheet is external that the browser can't
display the contents.
If I leave the external style sheet in place, I can see in the logs the
browser requesting
the page and then the style sheet. Both are returned with no errors, but
the browser
just sits there with a blank page, and never really finishes. It seems like
it is
waiting for something to complete, but it never finishes.

I'm guessing this was some bug in early versions of IE6, but does anyone
know what the
specific problem is, and how I can fix it by configuring Apache differently?

Thanks,
Mark
http://www.beiley.com


>>>> Hello,
>>>>
>>>> Several customers are not able to access my server via HTTPS. Their
>>>> browser
>>>> just sits there, and doesn't display anything. I've determined the
>>>> common
>>>> properties of these cases to be:
>>>>
>>>> Windows XP (all of them without SP2)
>>>> Internet Explorer 6
>>>>
>>>> I can see their requests show up fine in my log files, without errors.
>>>> These customers can visit other HTTPS sites. My site works fine for
>>>> the
>>>> vast majority of people. I'm stumped on the next step to try and debug
>>>> the problem. Any suggestions?
>>>>
>>>> My server configuration:
>>>> Apache 2.0.54 with mod_ssl and mod_deflate, running on Windows XP
>>>>
>>>> For an example URL, try: https://www.beileysoftware.com/handy.html
>>>>
>>>> Thanks,
>>>> Mark
>>>> http://www.beiley.com

____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org

Re: Apache 2.0 + mod_ssl problems with IE6 on XP (no SP2)

am 21.06.2007 16:34:14 von dufresne

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Mon, 11 Jun 2007, Mark Beiley wrote:

> I've learned that I can fix this problem by not using an external style
> sheet.
> This only affects IE6 on XP without SP2. Everyone else seems to be able
> to view my pages fine, and even these problematic IE6/XP customers can view
> pages with external style sheets that are not using HTTPS.




>


There are really idiots using XP without SP2? Damn!


Thanks,


Ron DuFresne
- --
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
admin & senior security consultant: sysinfo.com
http://sysinfo.com
Key fingerprint = 9401 4B13 B918 164C 647A E838 B2DF AFCC 94B0 6629

....We waste time looking for the perfect lover
instead of creating the perfect love.

-Tom Robbins
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)

iD8DBQFGeoxqst+vzJSwZikRAimeAJ9TaRtg2S4RYPSGjsho9oI+DIkp9QCf ZLgv
L0UtGwP46PoAop7cqTs6G+E=
=N1Ne
-----END PGP SIGNATURE-----
____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org