Submit Hint Search The Forums LinksStatsPollsHeadlinesRSS
14,000 hints and counting!


Click here to return to the 'Internet Explorer SSL certificate problem' hint
The following comments are owned by whoever posted them. This site is not responsible for what they say.
Internet Explorer SSL certificate problem
Authored by: bldantes on Feb 19, '03 06:20:28PM
The problem may lie with the HTTPS server and not IE. Global site certificates issued by Verisign are signed by an intermediate certificate authority for which the public key is not in most browsers' default lists. The intermediate certificate is signed by the Verisign root CA for which the public key is in all modern browsers' default lists. The problem is that some sites that use these Verisign Global Certs are not configured properly to "chain" the actual site certificate and the intermediate certificate together in response to an SSL handshake with the browser. All they do is return the server cert for which the browser does not recognize the issuer. The reason this happened to a lot of sites recently (FirstUSA is an example) is because Verisign recently switched from returning the intermediate cert with the signed server cert to requiring their clients to download it off their web site.

It so happens that IE for Windows happens to have this intermediate cert installed (it really shouldn't) - so the misconfigured site doesn't get noticed by the vast majority of users, and the offending webmasters feel no need to notice or fix the problem.

Try the sites that are giving you problems with Mozilla or IE under Windows, which allows you to examine the bad site certificate in detail. If the issuer is "OU=www.verisign.com/CPS Incorp.by Ref. LIABILITY LTD.(c)97 Verisign, OU=Verisign Internation Server CA - Class 3" - this is very likely the problem, and you should contact the webmaster of that site and tell them that they need to check their SSL configuration.

[ Reply to This | # ]

Internet Explorer SSL certificate problem
Authored by: yt00 on Aug 04, '03 04:07:57AM

well, the problem may NOT lie with the HTTPS server but IE.
i did some research on this, and found this:
http://www.modssl.org/docs/2.8/ssl_faq.html#io-ie

i mean, just use safari or quit using Mac..






[ Reply to This | # ]
Internet Explorer/Safari (OSX in general) SSL certificate problem
Authored by: chuckuzzo on Oct 02, '03 07:54:22PM

This one took me a long time to figure out. I have users using Mac browsers complaining about the certificate that I installed in our e-commerce webservers.

1. Go to verisign.com and copy the intermediate CA into /etc/httpd/conf/ssl.crt/gsid.crt. Here is the link to that CA:
http://www.verisign.com/support/install/intermediate.html

2. Add the following lines to your /etc/httpd/conf/httpd.conf:
SSLCACertificatePath /etc/httpd/conf/ssl.crt
SSLCertificateChainFile /etc/httpd/conf/ssl.crt/gsid.crt

3. Restart your apache server

Chuck



[ Reply to This | # ]
Internet Explorer SSL certificate problem
Authored by: ddebenedictis on Oct 20, '03 08:04:24PM

As a secure (SSL) web site operator, we are starting to get complaints from Mac users (both Safari and IE browsers) with this problem. We have Verisign certs. We have tried confirming our configuration with Verisign, and they are in fact telling us their certs do not support Mac. I am wondering if anyone has specific MS IIS configuration instructions to resolve this problem? Thank you for your time.



[ Reply to This | # ]
Internet Explorer SSL certificate problem
Authored by: coneman on Apr 20, '04 09:46:08PM

A common cause of this problem is time/date settings. Check your clock time/date/timezone is correct.



[ Reply to This | # ]