jfosterats
asked on
There is a problem with this websites security certificate, continue to this website is missing as an option
Attempting to access the RWW page of a small business server (https://mail.domain.com/remote). Some computers receive the warning of "there is a problem with this websites security certificate . In the past users were able to click the "continue" button but it is now missing. This is happening to different OS (windows 7 and 8.1) all running IE11. Machines are fully patched and updated. Other computers running the same version are able to access the site. I have tried changing the RSA key length in the registry, added the site to trusted sites, imported the certificate again, attempted to run in compatibility mode all with no luck.
ASKER
Lazarus, The certificate is self issued and has worked for a number of years with no issues. Also it is strange that some computers can access this with no issue and others cannot.
Is this the Chrome browser that is having the issue or Internet Explorer. Chrome is forcing a change, by abandoning sha1 certs: Beginning in October 2014, Google Chrome will start to show warnings for many sites with SSL/TLS certificates signed with the aging SHA1 signature algorithm.
Google Chrome will slowly phase this in based on when the end-identities certificate expires (and if any certificate uses SHA1). Depending on the end-identities expiry date will depend on the severity of the warning - also - each consecutive version of Google Chrome, beginning with Google Chrome 39, will potentially make the warning more severe
Not that this is necessarily the issue, that's why I ask the question. I've recently had to deal with this on some of our Certs to do with Chrome.
More info here: http://blogs.technet.com/b/pki/archive/2013/11/12/sha1-deprecation-policy.aspx
So look to resigning your certificate with sha256RSA instead.
Another checker specific to Chrome is here: http://sha1affected.com/
Google Chrome will slowly phase this in based on when the end-identities certificate expires (and if any certificate uses SHA1). Depending on the end-identities expiry date will depend on the severity of the warning - also - each consecutive version of Google Chrome, beginning with Google Chrome 39, will potentially make the warning more severe
Not that this is necessarily the issue, that's why I ask the question. I've recently had to deal with this on some of our Certs to do with Chrome.
More info here: http://blogs.technet.com/b/pki/archive/2013/11/12/sha1-deprecation-policy.aspx
So look to resigning your certificate with sha256RSA instead.
Another checker specific to Chrome is here: http://sha1affected.com/
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
That's great to hear. What did you find was the actual problem?
ASKER
Running the windows repair from tweaking.com fixed the issue. Tried all of the proposed solutions from the internet and Microsoft Tech Net articles with no results.
You can use this site to check a sites SSL: https://www.sslshopper.com/ssl-checker.html