SSL error when IE 4.72 tries to connect to webserver

Question

At least one 40-bit browser (IE 4.72) is producing this error
when trying to connect using SSL to webserver:
[11/Dec/2001 15:37:23 08295] [trace] OpenSSL: Loop: SSLv3 read
client hello A
[11/Dec/2001 15:37:23 08295] [trace] OpenSSL: Loop: SSLv3 write
server hello A
[11/Dec/2001 15:37:23 08295] [trace] OpenSSL: Loop: SSLv3 write
certificate A
[11/Dec/2001 15:37:23 08295] [trace] OpenSSL: Loop: SSLv3 write
server done A
[11/Dec/2001 15:37:23 08295] [trace] OpenSSL: Loop: SSLv3 flush
data
[11/Dec/2001 15:37:23 08473] [trace] OpenSSL: Exit: error in
SSLv3 read client certificate A
[11/Dec/2001 15:37:23 08473] [trace] OpenSSL: Exit: error in
SSLv3 read client certificate A
[11/Dec/2001 15:37:23 08473] [error] SSL handshake interrupted by
system [Hint: Stop button pressed in browser?!] (System error
follows)
[11/Dec/2001 15:37:23 08473] [error] System: Connection reset by
peer (errno: 131)
Have not been able to reproduce it on other browser versions yet.
No 128-bit browsers have gotten this error.
I'm using iAS 1.0.2.2.
My certificate from Verisign is 128-bit with step-down to 40-bit
for Export security browsers.

Answer 1

I had the same problem. In my case, Forms with SSO over SSL worked from the intranet, but not from the internet over the firewall. In the FW log, I found requests from my browser to the iAS at port 7778, on which runs the middle tier iAS, but that is blocked by the FW (we use WebCache at port 80 as a proxy).
Last time the ssoreg from the middle tier ran with -mod_osso_url http://<server_name>:7778, as indicated by the ssoreg.log. I reregistered the middle tier by means of ssoreg with -mod_osso_url http://<server_name>:80, restartet the http server from the middle tier, it corrected the error.