IMPORTANT! Possible IE problem resolution

[Ramon Kagan]

Hi,

After a lot of sniffing, snorting and ethereal I believe I have the
problem with IE and SSL sites.  IE has an issue with SSL in all versions
below IE 6 (i.e. most users then).  I have found docs on the microsoft
page (no hissing) and they admit they have had an error for over two
years (what a surprise).  In any case, their patch doesn't work (big
surprise again).  I have found more docs on an oracle site that suggests
the following.

If you use apache edit your config to include the line

SetEnvIf User-Agent ".*MSIE.*" ssl-unclean-shutdown

I have also set my apache to use sslv2 only, these two together seem to
have reduced my problems virtually to nothing.

To force sslv2

  SSLProtocol -all +SSLv2
  SSLCipherSuite SSLv2:+HIGH:+MEDIUM:+LOW:+EXP

using mod_ssl.

Hope this helps.

Ramon Kagan
York University, Computing and Network Services
Unix Team -  Intermediate System Administrator
(416)736-2100 #20263
rkagan@yorku.ca