#1
  1. Contributing User
    Devshed Newbie (0 - 499 posts)

    Join Date
    Jun 2001
    Location
    Manchester, UK
    Posts
    80
    Rep Power
    13

    SSL frames problem with Win NT IE 5.x client


    hi,

    i have a site up and running (http://www.dwl-online.co.uk/ ) that uses OpenSSL and is served by Apache. i have a frameset with three frames, two across the top (LHS menu, RHS shopping basket) and a main frame called body.

    users add to their basket using regular http then when they come to checkout i run a CGI script in the body frame that is served via https. this works for all clients except IE 5.x on Windows NT. those users get "Page cannot be displayed". IE. 5.x works on all other clients i can get my grubby hands on.

    any help would greatly appreciated.

    robert swift.
  2. #2
  3. No Profile Picture
    Contributing User
    Devshed Newbie (0 - 499 posts)

    Join Date
    May 2001
    Location
    North Vancouver, BC, Canada
    Posts
    44
    Rep Power
    13

    IE 5.5 and 128 bit


    I tried your site and then added the https and error both times.

    Is this the 128 vs 40 bit encryption [ i am in canada 128 okay zone ] ????

    or is this an Alien encounter of the fourth kind ?

    What is your server running 128 or 40 ??

    Can you access this if 40 ?? or 128 ??

    ================================
    Using IE 5.50.4522.1800 cipher strength 128
    Thanks

    Foot in Mouth ver 1.2.5 Onion
  4. #3
  5. Contributing User
    Devshed Newbie (0 - 499 posts)

    Join Date
    Jun 2001
    Location
    Manchester, UK
    Posts
    80
    Rep Power
    13
    hi footinmouth,

    firstly, thanks for responding. there are a few issues surrounding the problem.

    i am using a thawte CA (128 bit) that will [should!?] negotiate with the client for the best possible encryption strength.

    i also found from a microsoft friend of mine that the problem is specifically related to MSIE 5.01 so now i am worried about your 5.50 client! what version of windows are you using? did you actually get a screen that told you your request was invalid? if so, this means you got through and the client negotiated successfully with the server, i think you may have got this screen because there are no server side errors to indicate otherwise.

    sincere thanks for your help and i would appreciate any further comments you may have.

    robert swift.
  6. #4
  7. No Profile Picture
    Contributing User
    Devshed Newbie (0 - 499 posts)

    Join Date
    Jan 2001
    Posts
    56
    Rep Power
    14
    We had these problems, mac users users of IE from 4 -> mostly but 5.1 tended to be OK

    The cure (A hard one to find) drop apache MOD-SSL and install Apache-SSL this cured ALL IE problems!

    We had this problem for a year before we found the cure

    http://www.apache-ssl.org

    Hope it helps

    Regards
    Darren
    HTTP://WWW.PHP4HOSTING.COM ($) HTTP://WWW.PHP4HOSTING.CO.UK ()
    Website Hosting from $4.80/3pm -- .COM/.NET $39.98/24.99
    PHP4, MySQL (Root Access), Full CGI-BIN, Shell Access, FTP, POP3, WAP
    Full Control Reseller Accounts, unlimited domains, FTP, POP, MySQL,PHP4
  8. #5
  9. Contributing User
    Devshed Newbie (0 - 499 posts)

    Join Date
    Jun 2001
    Location
    Manchester, UK
    Posts
    80
    Rep Power
    13
    darren,

    thanks for the tip, did you find the cause of the problem? i have found a MS support page that states that setting TLS/SSL 2.0 & 3.0 active will cure it but this does not seem to be the case.

    i will certainly look into the apache-ssl.

    many thanks - robert.
  10. #6
  11. No Profile Picture
    Contributing User
    Devshed Newbie (0 - 499 posts)

    Join Date
    Jan 2001
    Posts
    56
    Rep Power
    14
    The MOD-SSL page shows some info for broken IE clients and I found a couple of other pages but nothing that seemed to work.

    It was also hard to reproduce as it didnt always fail. We had one Mac user that it failed on every time, after the upgrade it worked fine for him.

    I have an install script we use this end, and an httpd.conf file if you need it, there are only simple changes that need to be made.

    Just e-mail me if you want any other info.

    Good luck with it!

    Regards
    Darren
    HTTP://WWW.PHP4HOSTING.COM ($) HTTP://WWW.PHP4HOSTING.CO.UK ()
    Website Hosting from $4.80/3pm -- .COM/.NET $39.98/24.99
    PHP4, MySQL (Root Access), Full CGI-BIN, Shell Access, FTP, POP3, WAP
    Full Control Reseller Accounts, unlimited domains, FTP, POP, MySQL,PHP4

IMN logo majestic logo threadwatch logo seochat tools logo