[imp] Problem with SSL and compose

[Kevin Konowalec]

Well we're running 75,000 users here so I can't afford to be wasting  
too much time... especially when I get 60-100 irate emails from users  
a day.  I guess the main source of frustration is the lack of  
compiled documentation.  Sure you can say "go look in the newsgroups"  
but if you don't know what you're looking for that's not really helpful.

In this case it's not a Horde problem - it turns out (assuming nobody  
calls in the next few minutes to tell me it ISN'T fixed)  that the  
problem is indeed with (surprise surprise) MICROSOFT.  It's, I'm  
told, a bug in the way IE handles SSL.  To fix it I added the  
following to my httpd.conf file...

In the VirtualHost section for port 443:

SetEnvIf User-Agent ".*MSIE.*" \
         nokeepalive ssl-unclean-shutdown \
         downgrade-1.0 force-response-1.0


SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP

(note all that's changed here is we're not allowing Export56..)

SEEMS to be working now... Fingers crossed.




On Aug 19, 2005, at 11:06 AM, Graeme Wood wrote:

> Well you are running a *pre-release* version of an *old*
> release of the software. I don't think that is a good place
> to start from.  I have two installations one of 10,000 users
> and the other of 30,000 users and I would not agree with
> your assertion that it is not mature enough for large
> installations.
>
> On 19 Aug 2005, at 16:28, Kevin Konowalec wrote:
>
>
>> Nope.... still fails.
>>
>> This is frustrating.  My users are starting to get really irate.  I
>> don't think this is a mature enough system for large installations -
>> definitely lacking in documentation...
>>
>>
>> On Aug 18, 2005, at 7:15 PM, AJ wrote:
>>
>>
>>
>>> I have seen this w/ apache 1.3.x.
>>> The solution involves the SSLCipherSuite directive.
>>>
>>> Try asdding this directive to your httpd.conf file and restart  
>>> apache.
>>> See if this helps.
>>>
>>> SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:
>>> +EXP:+eNULL
>>>
>>>
>>> AJ
>>>
>>> Kevin Konowalec wrote:
>>>
>>>
>>>
>>>
>>>> This is EXACTLY the problem I'm having.  Have you had any success
>>>> figuring out what's going on with it?
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>> Hello,
>>>>>
>>>>> I'm using a Horde / IMP configuration:
>>>>>
>>>>> =============
>>>>> HORDE:
>>>>>
>>>>> Horde: 2.2.6-RC2
>>>>> IMP: 3.2.5
>>>>> Turba: 1.2.2
>>>>>
>>>>> PHP:
>>>>>
>>>>> PHP Version: 4.3.8
>>>>> PHP Major Version: 4.3
>>>>> PHP Minor Version: 8
>>>>>
>>>>>
>>>>> APACHE:
>>>>>
>>>>> Apache Version: 1.3.31 (Unix)
>>>>>
>>>>> =============
>>>>>
>>>>> I've got IMP working on an SSL apache (see version details above)
>>>>> If i compose a new message and send an E-mail it happens that i
>>>>> get  the
>>>>> error page cannot be found.
>>>>> Sometimes it happens and sometimes the message is been send.
>>>>> It doens't matter what the time is (all time-out settings i have
>>>>> disables
>>>>> or enlarge).
>>>>> The weird thing is that it seems like to happen more often when
>>>>> i  use the
>>>>> BCC and CC fields.
>>>>> If this is a coinsidence i don't know.
>>>>> If i turn off SSL (use the same configuration without SSL) then
>>>>> i  don't
>>>>> get that message.
>>>>> And messages are send. I've tested this a lot, it is in the  
>>>>> SSL....
>>>>> The logs (of Apache) doensn't give an error.
>>>>> Someone else got this message / error too?
>>>>> Or has had a problem like this?
>>>>>
>>>>> Thanks,
>>>>>
>>>>> With kind regards,
>>>>>
>>>>> Jan de Jongh
>>>>>
>>>>>
>>>>>
>>>>>
>>>
>>>
>>>
>>>
>>
>> -- 
>> IMP mailing list - Join the hunt: http://horde.org/bounties/#imp
>> Frequently Asked Questions: http://horde.org/faq/
>> To unsubscribe, mail: imp-unsubscribe at lists.horde.org
>>
>>
>
>