Dear All,
Is there any known problems in IE 6.0 SP1 in SSL session renegotiation
scenarios initiated by a SSL aware server. I have been facing 'Page cannot be
displayed' problems on submitting form data (POST method). Actually the SSL
session renegotiation is initiated by the server on receiving the POST
request.
On checking with the ethereal dump, i found that the negotiation process
fails at the last hurdle. That is, after the client sends its Change Cipher
Spec and Send Finished (both in encrypted form, Change Cipher Spec with the
previous key while the Send Finished with the newly negotiated key), the
server is promptly sending its Change cipher spec and send finished in
encrypted fashion using appropriate keys. The server also follows up the send
finished with the response application data encrypted with the lastly
negotiated key.
However IE closes the connection on receiving the application data. I have
manually checked the SSL packets recieved on the client side using ethereal
and found all of them to be proper (even decrypted them with the appropriate
keys(viz, server private key) and found the application data to be proper)..
The whole problem is, this behaviour of IE is not consistent and happens
once in a while.
So for i have encountered this problem in the following machine
configurations.
1) Win 2000 5.00.2195 Professional SP4 with
IE 6.0.2800.1106 Update Versions:SP1,Q833989,Q823353
2) Win 2003 Enterprise Edition SP1 with
IE 6.0.3790.1830 Update Versions: SP1;
3) Win 98 SE 4.10.2222A with IE 6.0.2600
Any pointers on this problem is appreciated.