NYCPHP Meetup

NYPHP.org

[nycphp-talk] SSL question

Adam Fields fields at surgam.net
Thu Oct 28 12:14:04 EDT 2004


On Thu, Oct 28, 2004 at 12:01:16PM -0400, Russ Demarest wrote:
> Sorry for an incomplete answer but this page may help
> http://www.pantz.org/webservers/apache/sslpagedisplay.shtml
> 
> There seem to be problems with IE (shock!).

There are definitely problems with IE with the default SSL settings in
Apache. 

Try changing the SSLCipherSuite line to:

SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP


> On Oct 28, 2004, at 11:45 AM, Rahmin Pavlovic wrote:
> 
> >Hi all -
> >
> >We're experiencing an annoying problem here, and I'm wondering if 
> >anyone can help shed some luz -
> >
> >We basically have a commerce site setup, and I'm forcing users to the 
> >https server when it comes to the credit card page.
> >
> >All works fine and dandy on the majority of our QA machines, except 
> >two boxes - both PC's, both running IE (go figure).
> >
> >The problem is this:  (apparantly) when submitting a form from a 
> >secure page to a secure page,
> >the page hangs about 75% of the time, but only on these two machines.
> >Rest of the time it goes through fine, and works fine on all other 
> >98/XP/2000 boxes we have here (and elsewhere).
> >
> >It appears as if this behavior only exists on secure pages.  When I 
> >channel the login page through the SSL,
> >the behavior kicks in on the login page w/these two machines.
> >
> >So I'm wondering if this may be an issue betwixt the SSL and the 
> >browser's in question..?
> >
> >I'm not well versed on the secure layer, so I'm not sure if more or 
> >less bits are being sent than can be received etc..
> >
> >I do have error reporting set to E_ALL, and we don't have any notices 
> >showing up so I doubt it's a rogue bug..
> >
> >I don't know - I'm kinda at a loss.
> >I know once we go live we're going to get lots of customer service 
> >calls regarding this, so I'd like to do whatever I can to nip it like 
> >Don Knotts.
> >
> >We're running FreeBSD on  Apache/1.3.31, OpenSSL/0.9.7d.
> >
> >Thanks for any insight into this.
> >
> >R
> >
> >
> >_______________________________________________
> >New York PHP Talk
> >Supporting AMP Technology (Apache/MySQL/PHP)
> >http://lists.nyphp.org/mailman/listinfo/talk
> >http://www.newyorkphp.org
> >
> 
> _______________________________________________
> New York PHP Talk
> Supporting AMP Technology (Apache/MySQL/PHP)
> http://lists.nyphp.org/mailman/listinfo/talk
> http://www.newyorkphp.org

-- 
				- Adam

-----
[ http://www.aquick.org/blog ]
[ http://www.adamfields.com ][ http://del.icio.us/fields ]
[ http://www.aquick.org/photoblog ][ http://www.aquick.org/gallery ]





More information about the talk mailing list