Solved

SSL site works on some PC's, but not others.

Posted on 2014-09-26
7
224 Views
Last Modified: 2014-10-04
Hi guys,

We have a load of store PC's still on Windows XP and running IE 8. All of these stores have the same PCs, specs and are all on our network range of 172.16.0.0/16. They all have the same applications, so it won't be another application taking up port 443. Also, our Watchguard firewall is set to permit all of these stores out to the same places. So whatever store 1 can access, store 2 can too.

The company we work with have made changes to their SSL certificates on their website recently and some PC's are able to access the actual IIS 7 page when accessing with HTTPS. And a load of other PC's are unable to reach the IIS 7 page.

My question is this: what on earth can I go back with to the guys who own the web servers? Can I ask them to make certain changes? Is there a binding issue somewhere?

Any diagnostics you can offer would be great.

Thanks guys
Yashy
0
Comment
Question by:Yashy
  • 3
  • 3
7 Comments
 
LVL 83

Accepted Solution

by:
Dave Baldwin earned 500 total points
ID: 40345695
Look into getting the "Root Certificate Store" updates for your PCs.  Root Certificates are the ones on your PC that are used to 'validate' the ones on web sites.  While Windows 7 and above may automatically update them, Windows XP never did, they were always optional.

http://support2.microsoft.com/kb/931125
0
 
LVL 1

Author Comment

by:Yashy
ID: 40345799
Hi Dave,

Thanks for responding. I went ahead and downloaded the hotfix and applied the 'Fix'. However, the website still doesn't publish sadly. I installed the fix and restarted the machine.

This is the test site I'm trying to get to https://ssl-test-2.tcppublishing.com
0
 
LVL 83

Expert Comment

by:Dave Baldwin
ID: 40346787
I don't have any trouble getting to that site but all it is is a basic IIS7 logo page.  It works the same in Firefox, Chrome, IE8, and Opera on this computer.

Are you getting any error messages?
0
VMware Disaster Recovery and Data Protection

In this expert guide, you’ll learn about the components of a Modern Data Center. You will use cases for the value-added capabilities of Veeam®, including combining backup and replication for VMware disaster recovery and using replication for data center migration.

 
LVL 1

Author Comment

by:Yashy
ID: 40346976
I know, it works from my PC at home and it does to from some of the PC's around our stores.

But from the non working PC's if I type the address above with just HTTP it works. If I type it with HTTPS then i get a 'page can't be displayed'. The firewall shows no logs of denials either.

And this all began when the 3rd party made changes to the webserver certificates. So I'm at a loss here. Sadly these stores don't have Firefox installed as they are locked down, so it's basically IE 8 for now!
0
 
LVL 83

Expert Comment

by:Dave Baldwin
ID: 40347149
Can those computers to go any 'https' site?  Try going to https://www.comodo.com/ in IE8 since they are the ones that are issuing the certificate.  

Also make sure that TLS 1.0 is checked in the Advanced options in Internet Options.  In the Content Tab, click on Certificates to view the ones that are installed.  Under Intermediate Certificate Authorities, you should see 3 listings for COMODO.
0
 
LVL 1

Expert Comment

by:ExpertNotReally
ID: 40347950
Verify you have the Root Certificate of the issuing authority for that site in your trusted certificate store.  Also you may have to add the site itself to the Trusted Sites Security Zone.
0
 
LVL 1

Author Comment

by:Yashy
ID: 40361447
the reason was because SP2 was installed for XP (I know..don't even get me started!) instead of SP3. So the encryption it uses to recognise the algorithm to recognise the certificate was not available for SP2. All sorted now using SP3:)

Thanks guys
0

Featured Post

Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you are a web developer, you would be aware of the <iframe> tag in HTML. The <iframe> stands for inline frame and is used to embed another document within the current HTML document. The embedded document could be even another website.
Citrix XenApp, Internet Explorer 11 set to Enterprise Mode and using central hosted sites.xml file.
This Micro Tutorial will demonstrate how to add subdomains to your content reports. This can be very importing in having a site with multiple subdomains.
This Micro Tutorial will demonstrate how nuggets on the Web are formatted by using Chrome Developer Tools. These tools would not only view the site's CSS but it can also modify it and save the CSS to use on your own site.

920 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now