Simpler Navigation for Servers and Operating Systems - Please Update Your Bookmarks
Completed: a much simpler Servers and Operating Systems section of the Community. We combined many of the older boards, so you won't have to click through so many levels to get at the information you need. Check the consolidated boards here as many sub-forums are now single boards.
If you have bookmarked forums or discussion boards in Servers and Operating Systems, we suggest you check and update them as needed.
cancel
Showing results for 
Search instead for 
Did you mean: 

Apache SSL - Internet Explorer

Highlighted
JordiPrats
Occasional Contributor

Apache SSL - Internet Explorer

I've set up a apache 1.3 with mod_ssl that need to authenticate users with digital certificates. But it only works with Mozilla well.

With IE it's asking for target's password on each request (every image, css...)

I've configured the following global parameters:


SSLRandomSeed startup builtin
SSLRandomSeed connect builtin
SSLLog /usr/local/apache-1.3.34/logs/ssl_engine_log
SSLLogLevel info


SSLSessionCache dbm:/usr/local/apache-1.3.34/logs/scache.twiki
SSLSessionCacheTimeout 600


Ant this is the virtual host configuration is:

SSLEngine on

SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP

SSLCertificateKeyFile /usr/local/apache-1.3.34/conf/ssl.key/serv-private.w02.pem
SSLCertificateFile /usr/local/apache-1.3.34/conf/ssl.crt/CERT_w02.xe.cesca.cat_2006_07_10-084501.crt

SSLVerifyClient none
SSLVerifyDepth 10

SSLOptions +ExportCertData +CompatEnvVars +StrictRequire +StdEnvVars +FakeBasicAuth

SetEnvIf User-Agent ".*MSIE.*" \
nokeepalive ssl-unclean-shutdown \
downgrade-1.0 force-response-1.0



I suspect that is somethin related with SSLSessionCache, but I don't know what. On a Linux box is working with the same configuration.

I've followed this reference:
http://www.modssl.org/docs/2.8/ssl_faq.html#ToC49


Thanks


1 REPLY
Yarek
Regular Advisor

Re: Apache SSL - Internet Explorer

Hi,

I recommend you to check Secure settings on IE(client) site