nokeepalive and SSLVerifyClient

permalink · #1 (**permalink**) 05-16-2007

This is a multi-part message in MIME format.

------_=_NextPart_001_01C797D8.25FF0BDA
Content-Type: text/plain;
charset="US-ASCII"
Content-Transfer-Encoding: quoted-printable

Sorry, I sent the last message prematurely (damn hotkeys).
=20
We currently use the following options to get around the IE SSL bug:
=20
SetEnvIf User-Agent ".*MSIE.*" \
nokeepalive ssl-unclean-shutdown \
downgrade-1.0 force-response-1.0

=20

We also wish to use X509 client authentication, and my concern is that
these directives will cause the client certification verification, and
indeed the entire SSL session negotiation, to be performed anew with
every single request. Is this performance hit a reality?

=20

Thanks,

Rich

------_=_NextPart_001_01C797D8.25FF0BDA
Content-Type: text/html;
charset="US-ASCII"
Content-Transfer-Encoding: quoted-printable

<html xmlns:o=3D"urn:schemas-microsoft-com:office:office" =
xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns=3D"http://www.w3.org/TR/REC-html40">

<head>
<META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
charset=3Dus-ascii">
<meta name=3DGenerator content=3D"Microsoft Word 11 (filtered medium)">
<style>

</style>

</head>

<body lang=3DEN-US link=3Dblue vlink=3Dpurple>

<div class=3DSection1><pre>Sorry, I sent the last message prematurely =
(damn hotkeys).<o:p></o:p></pre><pre><o:p> </o:p></pre><pre><fon=
t
size=3D2 face=3DArial>We currently use the =
following options to get around the IE SSL =
bug:<o:p></o:p></pre><pre><o:p> </o:p></pre><pre><fon=
t
size=3D2 face=3D"Courier New">SetEnvIf =
User-Agent ".*MSIE.*" =
\<o:p></o:p></pre><pre>      & nbsp;&nbs=
p; nokeepalive ssl-unclean-shutdown =
\<o:p></o:p></pre><pre>      & nbsp;&nbs=
p; downgrade-1.0 force-response-1.0<o:p></o:p></pre>

<o:p> </o:p>

We also wish to use X509 client authentication, and =
my
concern is that these directives will cause the client certification
verification, and indeed the entire SSL session negotiation, to be =
performed anew
with every single request.  Is this performance hit a =
reality?<o:p></o:p>

<o:p> </o:p>

Thanks,<o:p></o:p>

Rich<o:p></o:p>

</div>

</body>

</html>

------_=_NextPart_001_01C797D8.25FF0BDA--
__________________________________________________ ____________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode