Solved

Wrong / Invalid SSL shown on some computers

Posted on 2013-12-13
2
488 Views
Last Modified: 2013-12-13
Our website uses a certificate by GoDaddy and on most computers everything works fine - we can see no errors with the certificate and the information contained within is correct.

Some of our customers keep ringing us to say our certificate is invalid though. Upon inspection it appears the certificate is issued by our servers rDNS address and issued to the same. We have been unable to reproduce this issue.

What could be going on here and how can we resolve it?

See attached screenshots for an idea what I mean...
ValidCert.PNG
InvalidCert.PNG
0
Comment
Question by:Rabbit80
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 20

Accepted Solution

by:
TheAvenger earned 500 total points
ID: 39716086
Notice that the ones working have a newer Windows version than the ones not working (not working seems to be Windows XP). This means that probably Windows XP does not have the root certificate of GoDaddy. You can follow the steps here to check on both machines if the GoDaddy root certificate is installed or not. If it is not installed in Windows XP, you have to contact GoDaddy for support and probably a new certificate with an older (and supported by XP) certification authority. The other option is to make all your customers installed it manually but that will be a difficult task.

Note that Windows XP updates the root certificates with Windows Update. However depending on the environment these may not be installed, so some Windows XP users will have no problem while others will still have.
0
 
LVL 1

Author Closing Comment

by:Rabbit80
ID: 39716288
Thanks for that. It is virtually impossible for me to run through the checks to see if the correct root certificates are installed on our customers machines as this is a public facing website and we have thousands of people visiting daily. However - I have found a Microsoft patch that updates the root certificates and I am asking one of our users to try installing that to see if it helps. (KB931125).

Of course, as of April next year this problem is likely to get significantly worse as new updates to Windows XP machines will not be released meaning that root certificates will no longer be updated at all. Around 25% of our visitors still use XP.
0

Featured Post

What is SQL Server and how does it work?

The purpose of this paper is to provide you background on SQL Server. It’s your self-study guide for learning fundamentals. It includes both the history of SQL and its technical basics. Concepts and definitions will form the solid foundation of your future DBA expertise.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
clicking to find my folders on wamp 8 47
How to build a web site 17 105
use .htaccess to re-write URL 3 24
ssl mixed content reported 1 22
Do you come here a lot? Are you lazy like me and don't want to go through the "trouble" of having to click your Dock's Safari icon and then having to click your Experts Exchange Favorites bookmark to get here? Well then this article is for you.
#SSL #TLS #Citrix #HTTPS #PKI #Compliance #Certificate #Encryption #StoreFront #Web Interface #Citrix XenApp
This Micro Tutorial will demonstrate how to add subdomains to your content reports. This can be very importing in having a site with multiple subdomains.
How to create a custom search shortcut to site-search Experts Exchange using Google in the Firefox browser. This eliminates the need to type out site:experts-exchange.com whenever you want to search the site. Launch your Bookmark Menu: Press 'Ctrl +…

752 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question