/ Zope / Apsis / Pound Mailing List / Archive / 2003 / 2003-12 / Workaround for IE6.x not using SSL3.0 available ?

[ << ] [ >> ]

[ redirecting with pound / Joachim Schmitz ... ] [ Pound-current.tgz vs. ??? / Dennis Allison ... ]

Workaround for IE6.x not using SSL3.0 available ?
Sascha Gresk <Sascha.Gresk(at)Opensource-Consult.De>
2003-12-12 15:35:50 [ FULL ]
Hi all,

 From time to time some pages in IE6.x (Windows) cannot be displayed - i 
found
a workaround for this on the client side: switching SSL3.0 off works 
for me.


I have got pound running from yesterdays source, and also a line saying:


ListenHTTPS 1.2.3.4,443 /etc/pound.pem 
ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL


Although I do not understand the syntax, it does not seem to announce 
SSL3.0,
so maybe my config is broken or IE6.0 does not care ?


Sorry for asking about IE6.0 as it is not been listed as a tested 
Client browser,
but maybe a workaround for this exists anyway ?


Regards,
Sascha


[...]

Re: Workaround for IE6.x not using SSL3.0 available ?
Robert Segall <roseg(at)apsis.ch>
2003-12-15 12:18:11 [ FULL ]
On Friday 12 December 2003 15:35, Sascha Gresk wrote:[...]

The definition allows fall-back to SSL 2. Add before it the string SSLv3 and 
you're done. See the OpenSSL ciphers man page for details.[...]

MailBoxer