[ic] Urgent - SSL problems - Orders Failing

Andrew Rich andrew at mapsdownunder.com.au
Fri Oct 17 00:42:37 EDT 2003


> > > Hi All
> > > Config: RH 7.3, IC 4.8.7, Thawte SSL Certificate, Apache
> > 1.3.27, Perl 5.6.1,
> > > OpenSSL 0.9.6b
> > > My fears have been verified as a customer has just
> e-mailed to say:
> > > Browser indicated "place order" page unavailable did not
> > want to resubmit in
> > > case you had already received. Also Credit Card Icons did
> > not display so was
> > > unable to select Master card
> > > Errors for appropriate time would be the first 2 below.
> > >
> > > Server Apache error_log:
> > >
> > > [Thu Oct 16 16:37:16 2003] [info] [client 211.29.221.202]
> > (104)Connection
> > > reset by peer: client stopped connection before send body
> completed
> > > [Thu Oct 16 16:38:14 2003] [info] [client 211.29.221.202]
> > (104)Connection
> > > reset by peer: client stopped connection before send mmap
> completed
> > > [Thu Oct 16 17:53:22 2003] [info] [client 64.231.134.95]
> > read request line
> > > timed out
> > > [Thu Oct 16 18:14:41 2003] [error] [client 80.180.69.170]
> > File does not
> > > exist: /var/www/html/maps/"
> > > [Thu Oct 16 19:15:16 2003] [info] [client 203.220.194.83]
> > (104)Connection
> > > reset by peer: client stopped connection before send mmap
> completed
> > > [Thu Oct 16 19:15:16 2003] [info] [client 203.220.194.83]
> > (104)Connection
> > > reset by peer: client stopped connection before send mmap
> completed
> > > [Thu Oct 16 19:21:06 2003] [info] [client 203.220.194.83]
> > (104)Connection
> > > reset by peer: client stopped connection before send mmap
> completed
> > > [Thu Oct 16 19:24:41 2003] [info] [client 202.138.31.146]
> > send body timed
> > > out
> > > [Thu Oct 16 19:28:08 2003] [info] [client 202.138.31.146]
> > send body timed
> > > out
> > >
> > > Apache Config:
> > >
> > > #SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown
> > > SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown
> > > downgrade-1.0 force-response-1.0
> > >
> > > Yes I have a Thawte certificate b
> > >
> > > I use UP2DATE to keep server updated.  It has had the most
> > recent RH OpenSSL
> > > updates.
> > > I was wondering if this has had anything to do with it!
> > >
> > > I have just renewed the Thawte SSL Certificate (before I
> > saw Mike's issues).
> > > I have just applied for a Free Trial of Comodo SSL
> > (InstantSSL) to see if
> > > that is better.
> > >
> > > Any feedback would be of great assistance.
> > >
> > > Regards
> > > Andrew
> > > Maps Downunder
> > > www.mapsdownunder.com.au
> > > andrew at mapsdownunder.com.au
> >
> > I tried the URL in your sig and was able to get to the
> > checkout page ok
> > with Mozilla 1.5. I did not want to place a "fake" order but saw no
> > promblems up to that point. Is it only an IE issue?
> >
> > DB
>
> This customer made it to the checkout but couldn't place the order.
>
> I use IE 6.0.28 and is fine also with me.
>
> There is a test (foundation) site at
> www.mapsdownunder.com.au/cgi-bin/foundation
>
 By the way there is no online credit card processing.  We have our own
merchant facility.  test value of 4111111111111111 for credit card number is
fine.

Thanks DB for the test.  It obviously worked ok.

I think the issue is related to IE more so than Mozilla.

Has anyone tried the following in the httpd.conf

SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP

Andrew



More information about the interchange-users mailing list