[imp] ssl prob w/ certain browsers

Mark Nienberg mark@tippingmar.com
Mon, 26 Mar 2001 13:08:04 -0800


No, I am using a legitimate certificate from Thawte.  Also, as I noted 
in my first message, even the two "problem browsers" can 
successfully establish ssl connections to the imp server when I 
replace "/horde/imp/index.php3" with a static "index.html" file.

Here is  the error_log from an attempted connection using Mac IE5.

[Sun Mar 25 20:42:10 2001] [notice] Apache/1.3.14 (Unix) 
(RedHat/Linux) mod_ssl/2.7.1 OpenSSL/0.9.5a PHP/4.0.3pl1 
configured -- resuming normal operations

[Sun Mar 25 20:43:06 2001] [error] mod_ssl: SSL handshake 
interrupted by system
[Hint: Stop button pressed in browser?!] (System error follows)
[Sun Mar 25 20:43:06 2001] [error] System: Connection reset by 
peer (errno: 104)

And here is the ssl_request_log from the same connection attempt:
[25/Mar/2001:20:43:07 -0800] 208.25.89.60 SSLv3 RC4-MD5 "GET 
/ HTTP/1.1" 5

I haven't been able to resolve this, and I'm pretty much out of ideas.  
One thing I might still try is connecting first to a static page that then 
links to the imp page.  Maybe once the initial connection is 
established it will be maintained through the imp session? 

Mark Nienberg

On 26 Mar 2001, at 13:55, Chuck Hagenbuch wrote:

> Quoting Mark Nienberg <mark@tippingmar.com>:
> 
> > To clarify my previous list, the bad Win98 browser is IE5.0 without 
> > Service Pack 1 installed.  Once I install SP1, the problem goes 
> > away.  However, IE5.0 without SP1 and IE5.0 for Mac can both 
> > successfully connect to IMP over SSL at my ISP's server.  I think 
> > my ISP uses a different platform though (Solaris probably).   
> 
> Are you using a self-signed cert? I think I remember running into problems with 
> older IE browsers and self-signed certs; if you are, and your ISP has an actual 
> cert, that could explain the problem.