Https problems with MSIE

Hello.

We have a user with MSIE 6.00.2800.1106 who is unable to connect to one of
the sites we are hosting (https://www.lindorffd.com). He is using Windows
2000 SP3.

Have any of you had problems with MSIE 6.0 browsers?

I have seen suggestions to disable SSLv3, but wouldnt that adversely affect
other users?

Any suggestions are welcome.

-Torvald
____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org

Re: Https problems with MSIE

Hi Torvald,

You can find a tip regarding the MSIE issue at
.

I also discovered that the newest MSIE has more trouble with mod_ssl
than other browsers.
We saw that a MS Proxy Server (or MS ISA Server) with enabled
authentification using NTLM increase the issue.

We use the another way to resolve the MSIE keepalive issue. We have set
up a KeepaliveTimeout of 120 seconds.
The apache server may need more memory resources because there are more
open apache processes to cope with the longer timeout.

Regards,
Sven.


Am Don, 2003-09-25 um 08.18 schrieb Torvald Baade Bringsvor:
> Hello.
>
> We have a user with MSIE 6.00.2800.1106 who is unable to connect to one of
> the sites we are hosting (https://www.lindorffd.com). He is using Windows
> 2000 SP3.
>
> Have any of you had problems with MSIE 6.0 browsers?
>
> I have seen suggestions to disable SSLv3, but wouldnt that adversely affect
> other users?
>
> Any suggestions are welcome.
>
> -Torvald
> ____________________________________________________________ __________
> Apache Interface to OpenSSL (mod_ssl) www.modssl.org
> User Support Mailing List modssl-users@modssl.org
> Automated List Manager majordomo@modssl.org
--
Sven Geisler
AEC/communications GmbH

____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org

RE: Https problems with MSIE

>-----Original Message-----
>From: Torvald Baade Bringsvor [mailto:Torvald.Bringsvor@ergo.no]
>Sent: Donnerstag, 25. September 2003 08:19
>To: 'modssl-users@modssl.org'
>Subject: Https problems with MSIE
>
>
>Hello.
>
>We have a user with MSIE 6.00.2800.1106 who is unable to=20
>connect to one of
>the sites we are hosting (https://www.lindorffd.com). He is=20
>using Windows
>2000 SP3.

I have exactly the same version of browser (6.00.2800.1106) and can
confirm I connected successfully about 3 minutes ago.

Rgds,
Owen Boyle
Disclaimer: Any disclaimer attached to this message may be ignored.=20

>
>Have any of you had problems with MSIE 6.0 browsers?
>
>I have seen suggestions to disable SSLv3, but wouldnt that=20
>adversely affect
>other users?
>
>Any suggestions are welcome.
>
>-Torvald
>___________________________________________________________ ___________
>Apache Interface to OpenSSL (mod_ssl) www.modssl.org
>User Support Mailing List modssl-users@modssl.org
>Automated List Manager majordomo@modssl.org
>
Diese E-mail ist eine private und persönliche Kommunikation. Sie hat
keinen Bezug zur Börsen- bzw. Geschäftstätigkeit der SWX Swiss =
Exchange.
This e-mail is of a private and personal nature. It is not related to
the exchange or business activities of the SWX Swiss Exchange. Le
pr=E9sent e-mail est un message priv=E9 et personnel, sans rapport avec
l'activit=E9 boursi=E8re de la SWX Swiss Exchange.

This message is for the named person's use only. It may contain
confidential, proprietary or legally privileged information. No
confidentiality or privilege is waived or lost by any mistransmission.
If you receive this message in error, please notify the sender urgently
and then immediately delete the message and any copies of it from your
system. Please also immediately destroy any hardcopies of the message.
You must not, directly or indirectly, use, disclose, distribute, print,
or copy any part of this message if you are not the intended recipient.
The sender's company reserves the right to monitor all e-mail
communications through their networks. Any views expressed in this
message are those of the individual sender, except where the message
states otherwise and the sender is authorised to state them to be the
views of the sender's company.=20


____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org

RE: Https problems with MSIE

You can find a tip regarding the MSIE issue at
.

--I have already done this, to get MSIE 5.0 browsers to work.

I also discovered that the newest MSIE has more trouble with mod_ssl
than other browsers.
We saw that a MS Proxy Server (or MS ISA Server) with enabled
authentification using NTLM increase the issue.

We use the another way to resolve the MSIE keepalive issue. We have set
up a KeepaliveTimeout of 120 seconds.
The apache server may need more memory resources because there are more
open apache processes to cope with the longer timeout.

--Hmmm... but the FAQ mentioned the "nokeepalive" option, wouldnt that
cancel the KeepAliveTimeout??

-Torvald
____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org

RE: Https problems with MSIE

Am Don, 2003-09-25 um 10.24 schrieb Torvald Baade Bringsvor:
> You can find a tip regarding the MSIE issue at
> .
>
> --I have already done this, to get MSIE 5.0 browsers to work.
>
> I also discovered that the newest MSIE has more trouble with mod_ssl
> than other browsers.
> We saw that a MS Proxy Server (or MS ISA Server) with enabled
> authentification using NTLM increase the issue.
>
> We use the another way to resolve the MSIE keepalive issue. We have set
> up a KeepaliveTimeout of 120 seconds.
> The apache server may need more memory resources because there are more
> open apache processes to cope with the longer timeout.
>
> --Hmmm... but the FAQ mentioned the "nokeepalive" option, wouldnt that
> cancel the KeepAliveTimeout??

Yup. But did you aktivate "nokeepalive" for MSIE as discribed in the
FAQ?
We activate the Keepalive feature for all MSIE against the FAQ to
provide a more performanter connection.

Sven.

>
> -Torvald
> ____________________________________________________________ __________
> Apache Interface to OpenSSL (mod_ssl) www.modssl.org
> User Support Mailing List modssl-users@modssl.org
> Automated List Manager majordomo@modssl.org
--
Sven Geisler
AEC/communications GmbH

____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org