What's That Noise?! [Ian Kallen's Weblog]

Main | Next day (Sep 4, 2004) »

20040903 Friday September 03, 2004

F*ck PHP, ASP, JSP and XYZP while you're at it

While I can't say that mod_perl sucks more than PHP (nor can I say the same thing about Java and Struts, though it's strengths are narrower). They all suck in one way or another.

At least the PHP fans have a good sense of humor about how much the other guys suck.

Or maybe they're just angry cause Doug kinda orphaned mod_perl 2.0

( Sep 03 2004, 06:59:41 PM PDT ) Permalink
Comments [2]

Microsoft no se habla SSLv3?

Here's my little tale about Mac OS X/MSIE versus Apache/mod_ssl.

Some gripes about a self-signed certificate and compatibility with MSIE on Mac OS X for SSL access jumped to the foreground again recently. At first the assertion was that the name mismatch between the certificate's hostname and the actual hostname was flummoxing MSIE. So I generated a new certificate with a matching name. Still would bomb out with a "protocol error." Then I tried adding the site to MSIE's "trusted zone." bzzzzt! "protocol error" again!

Then it hit me: this code has languished at Microsoft for years. It's low-level protocol stuff could just be waaaay behind the times. So I changed the Apache configuration to include this directive

SSLProtocol all -SSLv3

ding ding ding ding!

So now I can accept the self signed certificate and move along. Does this mean that sites with CA-signed certificates can't use SSLv3 or does MSIE only require dumbing down the protocol when the certificate is self signed? Maybe this is a long standing FAQ but I'm kinda new to Mac OS X and haven't had to chase this down before.

( Sep 03 2004, 12:05:32 PM PDT ) Permalink