[users@httpd] SSL, IE 5 for Mac Problems

[Jennifer Zelazny <web@xxxxxxxxx>]

Hello.  I recently purchased a SSL certificate from Verisign (128-bit) 
for one of the web sites I host  (Apache/1.3.33, OpenSSL/0.9.7b).  
After configuring Apache, I was able to successfully connect (no 
warnings) to the secure web site I set up with Safari, Firefox, and 
Netscape on the Mac, and Firefox, Netscape, and IE on the PC.

When I try and connect to the secure site using IE, I get the following 
errors in my log (as well as the "unable to establish a secure 
connection" error in IE):

[Tue Apr  5 08:03:36 2005] [error] mod_ssl: SSL handshake interrupted 
by system [Hint: Stop button pressed in browser?!] (System error 
follows)nfPassword:
[Tue Apr  5 08:03:36 2005] [error] System: Connection reset by peer 
(errno: 54)

---------------------------
My Apache config:

<IfModule mod_ssl.c>
  	AddType application/x-x509-ca-cert .crt
  	AddType application/x-pkcs7-crl .crl
  	 SetEnvIf User-Agent ".*MSIE.*" \
    	nokeepalive ssl-unclean-shutdown \
    	downgrade-1.0 force-response-1.0
  	SSLProtocol all -SSLv3
  	SSLPassPhraseDialog builtin
 	SSLSessionCache dbm:/var/run/ssl_scache
  	SSLSessionCacheTimeout 300
 	SSLMutex file:/var/run/ssl_mutex
 	SSLRandomSeed startup builtin
 	SSLLog /var/log/httpd/ssl_engine_log
 	SSLLogLevel info
</IfModule>

<VirtualHost *:443>
    	ServerName domain.com
    	ServerAdmin webmaster@xxxxxxxxxx
    	DocumentRoot "/Volumes/www/Sites/domain.com/documents"
    	ErrorLog /var/log/httpd/error_log
    	TransferLog /var/log/httpd/access_log
    	SSLEngine on
    	SSLCipherSuite 
ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
    	SSLCertificateFile /etc/httpd/ssl_cert/server.crt
    	SSLCertificateKeyFile /etc/httpd/ssl_key/private.key
    	SSLCertificateChainFile /etc/httpd/ssl_cert/intermediate.crt
    	<Files ~ "\.(cgi|shtml|phtml|php3?)$">
      		SSLOptions +StdEnvVars
   	 </Files>
   	 <Directory "/Volumes/www/Sites/domain.com/documents">
      		SSLOptions +StdEnvVars
   	 </Directory>
</VirtualHost>

Any suggestions would be greatly appreciated.
Thanks,
Jen


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
  "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx