Bug#421802: apache2: ssl.conf dropped IE workarounds

[Chris Withers <chris@simplistix.co.uk>]

Package: apache2
Version: 2.2.3-4
Severity: normal


For no apparent reason, the following IE support lines were removed from mods-available/ssl.conf in the transition from sarge to etch:

SetEnvIf User-Agent ".*MSIE.*" \
         nokeepalive ssl-unclean-shutdown \
         downgrade-1.0 force-response-1.0

Doing so breaks file downloads over SSL for a percentage of IE users.

Adding the lines back in solves the problem.

Given that Apache 2.x upstream still has these lines in their default config:

http://svn.apache.org/viewvc/httpd/httpd/branches/2.2.x/docs/conf/extra/httpd-ssl.conf.in?revision=515485&view=markup

...and that this change is likely to cause problems for many people using Apache to serve files to IE users, can we have those lines back please?

-- System Information:
Debian Release: 4.0
  APT prefers stable
  APT policy: (700, 'stable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-4-686
Locale: LANG=en_GB, LC_CTYPE=en_GB (charmap=ISO-8859-1)

Versions of packages apache2 depends on:
ii  apache2-mpm-worker            2.2.3-4    High speed threaded model for Apac

apache2 recommends no packages.

-- no debconf information