[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#421802: apache2: ssl.conf dropped IE workarounds

Package: apache2
Version: 2.2.3-4
Severity: normal

For no apparent reason, the following IE support lines were removed from mods-available/ssl.conf in the transition from sarge to etch:

SetEnvIf User-Agent ".*MSIE.*" \
         nokeepalive ssl-unclean-shutdown \
         downgrade-1.0 force-response-1.0

Doing so breaks file downloads over SSL for a percentage of IE users.

Adding the lines back in solves the problem.

Given that Apache 2.x upstream still has these lines in their default config:


...and that this change is likely to cause problems for many people using Apache to serve files to IE users, can we have those lines back please?

-- System Information:
Debian Release: 4.0
  APT prefers stable
  APT policy: (700, 'stable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-4-686
Locale: LANG=en_GB, LC_CTYPE=en_GB (charmap=ISO-8859-1)

Versions of packages apache2 depends on:
ii  apache2-mpm-worker            2.2.3-4    High speed threaded model for Apac

apache2 recommends no packages.

-- no debconf information

Reply to: