No https:// requests can get through

[Scotmk]

Hi

Wierd one here. We have a small number of new laptops which have just been built (we are on RM CC3), all works great when in school, but if we take one home and connect via wireless broadband we cannot get to any sites that use SSL. very wierd, anyone had this? or know how to cure it. The older laptops, of the same make and model all work fine.

Thanks

[richard.thomas]

Seems like a proxy error, but if they're getting onto other sites there shouldn't be... Is it possible that internet explorer is remembering the proxy for SSL protocol?

[PEO]

Verify that Internet Explorer Is Using 128-Bit Encryption:

In Internet Explorer, on the Help menu, click About Internet Explorer
The level of encryption on your computer appears next to the words Cipher Strength.
Verify that the Cipher Strength value appears as 128-bit
If the Cipher Strength is anything less then 128-bit, download the "Explorer Internet High Encryption Pack" to your computer's hard disk, and then install it.

Delete Temporary Internet Files
There's also a possibility of some corrupted files in your Temporary Internet Files (TIF) storage. You should clear these
In Internet Explorer, on the Tools menu, click Internet Options, and select the General tab
Under Temporary Internet files, click Delete Files, and click OK when you are prompted to confirm the deletion

Configure Security settings for the Trusted sites zone in Internet Explorer:
In Internet Explorer, on the Tools menu, click Internet Options, and select the Security tab
Select Trusted sites, and then click Default Level
Add the secure Web site you are trying to access to the Trusted sites zone. To do so, click Sites, type the address (URL) of the site in the Add this Web site to the zone box
Click Add, click OK, and then click Apply

Clear the Secure Sockets Layer (SSL) slate and AutoComplete history:
In Internet Explorer, on the Tools menu, click Internet Options, and select the Content tab
Under Certificates, click Clear SSL State
Click OK when you receive the message that the SSL cache was successfully cleared
Under Personal information, click AutoComplete
Under Clear AutoComplete history, click Clear Forms. Click OK when you are prompted to confirm the operation.
Verify that Internet Explorer is configured to use SSL 2.0 and SSL 3.0
In Internet Explorer, click on the Tools menu, click Internet Options, and select the Advanced tab
In the Settings box, under the Security header, click to select the Use SSL 2.0 and Use SSL 3.0 check boxes (if they are not already selected), and then click OK

Verify that the Date and Time Settings on Your Computer Are Correct:
Because SSL certificates have an expiration date, if the date on your computer isn't correct, it may prevent you from connecting to secure sites.
To verify that your computer is configured with the correct date and time settings
Click Start > click Control Panel
Click Date, Time, Language, and Regional Options, and then click Date and Time
Select the Date & Time tab
Check to make sure that the date and time settings are configured to use the current date and time, and then click OK

Check the file integrity of the IE and Outlook:
Click Start>Run> "sfc /scannow" (without quotes) It might ask for the Windows CD to upload the corrupted files
Click Start>Run> regsvr32 softpub.dll (without quotes) and wait for the OK message; then try again.
Here are some Microsoft Knowledge Base articles dealing with this problem that you may like to look at if you aren't able to solve the problem. Just Google the error number and you should find some additional info on it!
261328 - Cipher Strength Appears as 0-Bit in Internet Explorer
301803- Error Message When You Try to Connect to Secure Site: Client Certificate Has Expired or Is Not Yet Valid
303807- "The Page Cannot Be Displayed" Error Message When You Try to View Web Page on a Secure Web Site
305217- Page Cannot Be Displayed Error During SSL 3.0 Server Session Timeout
811383- Internet Explorer Connectivity and Certificate Display Issues
813951- You Cannot Access Your MSN E-mail Account or Authenticate with a Web Site in Various Programs
821814- You Receive a "Page Cannot Be Displayed" Error Message When You Post to a Site That Requires Authentication

[Scotmk]

Thanks Mr Happy, but I spent most of last night doing exactly that, I found a site that had the same info on, but to no avail.

[PEO]

okies. I did come across this problem once on someones personal hom computer and I busted my nuts for 3 hours trying every trick/technique to make it work.

In the end I had to give in to defeat and re-install XP. Worked in the end, but I've never been able to figure out what it was.

the info above is what i also followed of a website.

[greenfieldsupport]

see if firefox can use it

[greenfieldsupport]

oh also for ssl, ensure your date and time are set right, ive seen a couple with date set correct and time but with the year 2040.

SSL certificates would then show up invalid
and if you have it set to reject invalid certs, it wont work at all>?

Possible?

[PEO]

Ha greenfieldsupport I tried that aswell and it didnt work

[greenfieldsupport]

was your date set correctly? :P

[greenfieldsupport]

go through internet properties and click anything and everything that says "DEFAULT", "return to original settings" etc

:P

[PEO]

hahaha :P

[greenfieldsupport]

intact if it works in school and not at home then that might be the answer.

id be more inclined to go with the "you have messed up proxy settings, which are configured for your school and not home"

buttt

if thats not the case its possible that your laptops have knackered bios's, resulting in you recieveing the correct date and time in school where it pulls it from your domain controller but when you get home your clock has skewed so greatly that youve found yourself back in time?

(can you tell im making stabs in the dark now??)

though it is technically possible :P
(still)

[Scotmk]

hmmm

I think it may be to do with RM Synchronise! We are just checking things now.

[StewartKnight]

is port 43 open on the firewall?

[flamer117]

Hi
We had this and RM say the only way you can connect to HTTPS away from school is to have RMSyncronise installed on the laptop. I have tried this and it does work. Downside is using RMSync which causes its own problems. Dave