[OPEN-ILS-DEV] apache / IE / ssl

[Bill Erickson]

I ran into an issue today with SSL and Internet Explorer on our development
servers.  When I tried to log into the OPAC with IE, I got an error popup
about the authentication server not working.  Turns out the API calls were
not even making it to the gateway.

The Apache error log showed something like this:

Mon Mar 05 12:32:11 2007] [debug] ssl_engine_io.c(1786): OpenSSL: I/O error,
5 bytes expected to read on BIO#22efeb0 [mem: 2320ca0]
[Mon Mar 05 12:32:11 2007] [info] [client 10.0.3.5] (70007)The timeout
specified has expired: SSL input filter read failed.

Apparently, IE has some issues with SSL communication that require
additional Apache configuration in the SSL virtual host.  Some distros may
add this by default, but the Apache config we had in CVS did not have it, so
I've added it.


BrowserMatch ".*MSIE.*" \
      nokeepalive ssl-unclean-shutdown \
      downgrade-1.0 force-response-1.0


-bill

-- 
Bill Erickson
PINES Systems Developer
Georgia Public Library Service
billserickson at gmail.com
http://open-ils.org
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://list.georgialibraries.org/pipermail/open-ils-dev/attachments/20070305/72dc9aff/attachment.html