I really need help and I am really desperate on this:

A script that runs on https:// is filled out and reloads the same file again (simple <form>-Tag) to check the data and show the next entry form.

All works fine on http:// and also on https:// with all browsers except IE.

I already know there is a bug in IE and that there is a patch for openSSL. But my customer do not want to apply this patch because he don't want to affect other customers and other browsers.

Can anybody *please* can tell me what the nature of this problem is and how I could program a workaround on this? The script is in PHP and I am using PHP sessions.

Marian

Is the "patch" that you're talking about, modifying the httpd config file? That's what I would call a work around. But this explains why it's required:

http://www.modssl.org/docs/2.8/ssl_faq.html#ToC49

I don't believe that disabling SSLv3 is going to cause any problems with other browsers. The other browsers will just use a v2 connection if a v3 one isn't available.

You can also just disable SSL3 in MSIE in Tools -> Advanced, and uncheck the box that says "Use SSL 3.0".

thanks for your reply. My customer already did the change you mentioned in his http.conf (at least he told me so) but it did not remove the problem.

Now I am just testing for other "workarounds" and found some strange things like:

1. the error could be removed if I remove all the images from the page and put a preselected item into all <select> fields.

2. the error shows up again, if I use <select> fields without a preselected entry (i.e. none of the <option> fields has a "SELECTED" in it). So I put a predefined fiels back in each <select> field. Error was removed again.

3. the error shows up again, if I put in the images again. Removed the images, error is gone again.

This behaviour is really strange and I am really looking forward to get this problem solved.

Marian

I've seen this problem... it doesn't happen with IE6 though..

I ended up having to enable SSLSessionCache which seemed to solve all the problems.

Course, I still use all the other fixes listed, just in case....

Man I hate IE!