Forum OpenACS Q&A: Re: nsopenssl error EOF during ssl handshake

Collapse
Posted by Bernd Eidenschink on
Hi,

also try this:

a) disable SSLv3
b) use this Cipher Suite:
ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP

and

c)

Set

ns_param ServerSessionCache              false

to

ns_param ServerSessionCache              true

as is written in some FAQ: "And finally there are versions of MSIE which seem to require that an SSL session can be reused (a totally non standard-conforming behaviour, of course). Connection with thos MSIE versions only work if a SSL session cache is used"

Validate you created the keys with "correct" bit sizes, e.g. I for myself once created a private key with a key size of 1048 bit instead of 1024, small typo... But some - not all - browsers could not connect anymore to the site 😊

Regards,
Bernd.