Re: [Pi3web-users] openssl 0.9.7c path: IE5.0 fails to negotiate on https with pi3web on SSLv3

[<zi...@t-...>]

Hi,

'EXP1024-RC4-SHA' shows, that the browser is an export version (limited 
40/56bit encryption).
The problem itself or similar problems seems to be known already, as the 
following thread from an archive of the mod_ssl users forum shows :
http://www.mail-archive.com/mod...@mo.../msg09453.html

Unfortunately they do not clearly point to a solution but you can try 
the following:
- check, whether the (virtual ?) hostname of the server is the same as 
the name in the CN field of the server certificate
- try to modify the openssl cipher string, after installation of Pi3Web 
it is 'DEFAULT', try, e.g. 
ALL:!ADH:!EXP56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
  (read the openssl documentation for details)
- update the browser to a 128 bit version

--
regards,
Holger

Dharmesh Shah schrieb:

> Using the latest patch for openssl - 0.9.7c for Win32 - I.E. 5.0 
> (default browser with Windows 2000) fails to negotiate the https 
> connection with pi3web on SSLv3. pi3 reports unknow cipher error:
>
> SSL[SSL.c, 1635]: SSL: Unknown cipher, 'EXP1024-RC4-SHA'
>
> help!!
>
> _________________________________________________________________
> Easiest Money Transfer to India . Send Money To 6000 Indian Towns. 
> http://go.msnserver.com/IN/42198.asp Easiest Way To Send Money Home!
>
>
>
> -------------------------------------------------------
> The SF.Net email is sponsored by EclipseCon 2004
> Premiere Conference on Open Tools Development and Integration
> See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
> http://www.eclipsecon.org/osdn
> _______________________________________________
> Pi3web-users mailing list
> Pi3...@li...
> https://lists.sourceforge.net/lists/listinfo/pi3web-users
>