Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Vista
Apache 2 with SSL/TLS: Step-by-Step, Part 1
Artur Maj

Comments Mode:
Apache 2 with SSL/TLS: Step-by-Step, Part 1 2006-11-20
Anonymous
I was having the IE/SSL problem that is supposed to be resolved by:

SetEnvIf User-Agent ".*MSIE.*" \

nokeepalive ssl-unclean-shutdown \

downgrade-1.0 force-response-1.0

If this does not work for you, try testing whether the BrowserMatch or SetEnvIf statements are working. The statement was already in my conf file, but the problem persisted.

I added the following into an apache 1.3 server that was not having problems, and the apache 2 server that was having a problem.

#TEST BROWSERMATCH FUNCTION

BrowserMatch ".*MSIE.*" IE_browser=yes

SetEnvIf User-Agent ".*MSIE.*" IE_browser2=sure

Then I ran phpinfo() on both servers. In the Apache Environment section, the environmental values for IE_browser and IE_browser2 appeared on the apache 1.3 server but not the apache 2 server. The server reported no errors, but the module to make the BrowserMatch statement work was not functioning, so in essence, no fix was actually being applied to the IE browsers.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/infocus/1818/758#758







 

Privacy Statement
Copyright 2007, SecurityFocus