Browsers listed as "40 or 56-bit" are listed that way because I don't know if the browser was the 40 or 56-bit version. This is because I disallow connections at 56-bit to avoid broken versions of IE. I need your results in order to tell the difference!

To attempt to access the test SSL server go here.

Sorry, the test SSL server is unavailable at this time

The server is running Apache/1.3.14 (Unix) mod_ssl/2.7.1 OpenSSL/0.9.6 with a self-signed 128-bit SSL certificate on RedHat Linux 6.2 with all updates. The server was built from the instructions with egcs-1.1.2 EXCEPT that I compiled OpenSSL with -O2 instead of the default -O3. OpenSSL was also compiled with the -fPIC and no-idea configuration options.

The server configuration contains the standard

SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
SetEnvIf User-Agent ".*MSIE.*" \
         nokeepalive ssl-unclean-shutdown \
         downgrade-1.0 force-response-1.0
	

If your browser does fail, could you try these two sites? www.ebetonline.co.nz and www.ebetusa.com. These two sites are also running mod_ssl 2.7.1 but have real certificates and are running on the standard port (as they are production sites! ;-) So far most failures seem to be because my test server is running a test certificate or on a non-standard port.