Why I can't access the web pages by IE (HTTPS with DES-CBC-SHA?)

[person]

Hi all,

My problem is I can't access web pages by IE6.0.29 when server uses the DES-CBC-SHA or other(DES or DES3) cipher suits.
But the firefox work well.:eek: (good fox).

The server is worked with stunnel-4.15 and openssl-0.9.8b.
I just enabled the DES-CBC-SHA cipher(I had already tried other cipher suits too). I found only RC4 cipher suits are ok. Is any wrong configuration with my server? or the IE?:?:
Best regards,
Person

[fws]

Hi all, My problem is I can't access web pages by IE6.0.29 when server uses the DES-CBC-SHA or other(DES or DES3) cipher suits. But the firefox work well.:eek: (good fox). The server is worked with stunnel-4.15 and openssl-0.9.8b. I just enabled the DES-CBC-SHA cipher(I had already tried other cipher suits too). I found only RC4 cipher suits are ok. Is any wrong configuration with my server? or the IE?:?: Best regards, Person

I ran into a very similar problem. I think that the solution is to use the SSL_OP_ALL or SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS flags for OpenSSL. Look at the SSL_CTX_set_options(3) documentation: http://www.openssl.org/docs/ssl/SSL_CTX_set_options.html

[person]

I ran into a very similar problem. I think that the solution is to use the SSL_OP_ALL or SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS flags for OpenSSL. Look at the SSL_CTX_set_options(3) documentation: http://www.openssl.org/docs/ssl/SSL_CTX_set_options.html

You are right!!
I love you~:cheesy: SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS
Regards,
Person