Solved

There is a problem with this website's security certificate., IE8 only, Firefox fine

Posted on 2010-08-20
12
2,793 Views
Last Modified: 2013-12-08
I have OWA set up on a a SBS2008 64 bit server.
It uses a Godaddy secure ceertificate for OWA access.

Everyone is fine, except one user for OWA access from their homes.
Even on this user, for Firefox it works fine. It's just Internet Explorer 8 that throws up the
"There is a problem with this website's security certificate" warning.
I have installed the certificate, but it makes no difference, it still throws up teh error.

It's obviously some problem with the local PC and probably some setting in Internet Explorer, as everyone else is fine.


Any ideas?
0
Comment
Question by:afurness
12 Comments
 
LVL 20

Accepted Solution

by:
woolnoir earned 250 total points
Comment Utility
you can try either

Load an MMC console with "Certificates" snap in for the local computer & Computer Account. The go to Intermediate Certification Authorities. From there, go to the Certificates folder. Right click on the "Starfield Class 2 Certificate Authority" cert. You should see the "Disable all purposes for this certificate" selected... choose the top option "Enable all purposes for this certificate".

or

get all certificates from https://certs.godaddy.com/anonymous/repository.seam and install gd_bundle.crt,

its a known bug with IE8 agreeing with the registrars validity.
0
 
LVL 3

Expert Comment

by:JtR
Comment Utility
Maybe your user has not the root certificate for the CA in his certificate storage? Check out if he can see ALL nescessary certificates in his browser!?
0
 
LVL 20

Expert Comment

by:woolnoir
Comment Utility
also maybe try http://www.sslshopper.com/ssl-checker.html to check your site.. you have indicated it will work fine with firefox, but this may identify the reason for the IE8 certification problem...

It seems most people can resolve it by following the steps in my post above.
0
 

Author Comment

by:afurness
Comment Utility
I can see the certificate in installed.
I tried installing the gd_bundle.crt, but makes no difference.

I've noticed when I look at the Certificate path, the Certificate status says "The issuer of this certificate cannot be found"

Above that in the general tab, it says "Windows does not have enough information to verify this certificate".
 
0
 

Author Comment

by:afurness
Comment Utility
I ran that ssl checker on our site as well and it all checks out OK.
0
 
LVL 20

Expert Comment

by:woolnoir
Comment Utility
did you do this ?

Load an MMC console with "Certificates" snap in for the local computer & Computer Account. The go to Intermediate Certification Authorities. From there, go to the Certificates folder. Right click on the "Starfield Class 2 Certificate Authority" cert. You should see the "Disable all purposes for this certificate" selected... choose the top option "Enable all purposes for this certificate".
0
Enabling OSINT in Activity Based Intelligence

Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

 

Author Comment

by:afurness
Comment Utility
I didn't see anything called "Starfield Class 2 Certificate authority"
I saw "Godaddy Class 2 certificate authoirity" which had "Enable all purposes for this certificate" already set to enabled.
0
 

Author Comment

by:afurness
Comment Utility
I found an entry for godaddy in the "Trusted root certificates authority " certificate folder, I noticed it set only a list to enabled.
I set it to all and allpied.

The PC in question still came up with the same warning, but I wonder ifthere's a delay or something before the changed is picked up maybe?

0
 
LVL 6

Expert Comment

by:DewFreak
Comment Utility
When you were having your cert issued it should have asked if you wanted a GoDaddy or Starfield.  Which did you choose?
0
 

Author Comment

by:afurness
Comment Utility
I don't remember choosing Starfield, so it must have been Godaddy.

Taking this further, I had a different user remotely try to connect using IE version 8, the same version etc as the user who's having a problem and their OWA works fine, so it must be a problem specific to the PC for the user having issues.

His PC is a bit of a mess anyway, so it's possibly his IE install is just corrupted in some way.

I will try to run a few cleanups on the PC before taking this investigation any further.

Is it possible to allocate half points for your help? As you have pointed out some very useful checks, even though everything checked out ok?
0
 
LVL 20

Expert Comment

by:woolnoir
Comment Utility
You can allocate the points to whoever you want....
0
 

Author Closing Comment

by:afurness
Comment Utility
Did not resolve my issue actually, but was very useful information I was given.
0

Featured Post

Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

Join & Write a Comment

#Citrix #Internet Explorer #Enterprise Mode #IE 11 #IE 8
When you start your Windows 10 PC and got an "Operating system not found" error or just saw  "Auto repair for startup". After a while, you have entered a loop for Auto repair which does not fix anything and you will be in a  panic as all your work w…
Google currently has a new report that is in beta and coming soon to Webmaster Tool accounts. This Micro Tutorial will highlight new features for Google Webmaster Tools.
This Micro Tutorial will demonstrate how nuggets on the Web are formatted by using Chrome Developer Tools. These tools would not only view the site's CSS but it can also modify it and save the CSS to use on your own site.

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now