No https:// requests can get through

[Scotmk]

Hi

 

Wierd one here. We have a small number of new laptops which have just been built (we are on RM CC3), all works great when in school, but if we take one home and connect via wireless broadband we cannot get to any sites that use SSL. very wierd, anyone had this? or know how to cure it. The older laptops, of the same make and model all work fine.

 

Thanks

[richard.thomas]

Seems like a proxy error, but if they're getting onto other sites there shouldn't be... Is it possible that internet explorer is remembering the proxy for SSL protocol?

[PEO]

Verify that Internet Explorer Is Using 128-Bit Encryption:

 

In Internet Explorer, on the Help menu, click About Internet Explorer

The level of encryption on your computer appears next to the words Cipher Strength.

Verify that the Cipher Strength value appears as 128-bit

If the Cipher Strength is anything less then 128-bit, download the "Explorer Internet High Encryption Pack" to your computer's hard disk, and then install it.

 

Delete Temporary Internet Files

There's also a possibility of some corrupted files in your Temporary Internet Files (TIF) storage. You should clear these

In Internet Explorer, on the Tools menu, click Internet Options, and select the General tab

Under Temporary Internet files, click Delete Files, and click OK when you are prompted to confirm the deletion

 

Configure Security settings for the Trusted sites zone in Internet Explorer:

In Internet Explorer, on the Tools menu, click Internet Options, and select the Security tab

Select Trusted sites, and then click Default Level

Add the secure Web site you are trying to access to the Trusted sites zone. To do so, click Sites, type the address (URL) of the site in the Add this Web site to the zone box

Click Add, click OK, and then click Apply

 

Clear the Secure Sockets Layer (SSL) slate and AutoComplete history:

In Internet Explorer, on the Tools menu, click Internet Options, and select the Content tab

Under Certificates, click Clear SSL State

Click OK when you receive the message that the SSL cache was successfully cleared

Under Personal information, click AutoComplete

Under Clear AutoComplete history, click Clear Forms. Click OK when you are prompted to confirm the operation.

Verify that Internet Explorer is configured to use SSL 2.0 and SSL 3.0

In Internet Explorer, click on the Tools menu, click Internet Options, and select the Advanced tab

In the Settings box, under the Security header, click to select the Use SSL 2.0 and Use SSL 3.0 check boxes (if they are not already selected), and then click OK

 

Verify that the Date and Time Settings on Your Computer Are Correct:

Because SSL certificates have an expiration date, if the date on your computer isn't correct, it may prevent you from connecting to secure sites.

To verify that your computer is configured with the correct date and time settings

Click Start > click Control Panel

Click Date, Time, Language, and Regional Options, and then click Date and Time

Select the Date & Time tab

Check to make sure that the date and time settings are configured to use the current date and time, and then click OK

 

Check the file integrity of the IE and Outlook:

Click Start>Run> "sfc /scannow" (without quotes) It might ask for the Windows CD to upload the corrupted files

Click Start>Run> regsvr32 softpub.dll (without quotes) and wait for the OK message; then try again.

Here are some Microsoft Knowledge Base articles dealing with this problem that you may like to look at if you aren't able to solve the problem. Just Google the error number and you should find some additional info on it!

261328 - Cipher Strength Appears as 0-Bit in Internet Explorer

301803- Error Message When You Try to Connect to Secure Site: Client Certificate Has Expired or Is Not Yet Valid

303807- "The Page Cannot Be Displayed" Error Message When You Try to View Web Page on a Secure Web Site

305217- Page Cannot Be Displayed Error During SSL 3.0 Server Session Timeout

811383- Internet Explorer Connectivity and Certificate Display Issues

813951- You Cannot Access Your MSN E-mail Account or Authenticate with a Web Site in Various Programs

821814- You Receive a "Page Cannot Be Displayed" Error Message When You Post to a Site That Requires Authentication

[Scotmk]

Thanks Mr Happy, but I spent most of last night doing exactly that, I found a site that had the same info on, but to no avail.

[PEO]

okies. I did come across this problem once on someones personal hom computer and I busted my nuts for 3 hours trying every trick/technique to make it work.

 

In the end I had to give in to defeat and re-install XP. Worked in the end, but I've never been able to figure out what it was.

 

the info above is what i also followed of a website.

[greenfieldsupport]

see if firefox can use it

[greenfieldsupport]

oh also for ssl, ensure your date and time are set right, ive seen a couple with date set correct and time but with the year 2040.

 

SSL certificates would then show up invalid

and if you have it set to reject invalid certs, it wont work at all>?

 

Possible?

[PEO]

Ha greenfieldsupport I tried that aswell and it didnt work

[greenfieldsupport]

was your date set correctly?

[greenfieldsupport]

go through internet properties and click anything and everything that says "DEFAULT", "return to original settings" etc

 

[PEO]

hahaha

[greenfieldsupport]

intact if it works in school and not at home then that might be the answer.

 

id be more inclined to go with the "you have messed up proxy settings, which are configured for your school and not home"

 

buttt

 

if thats not the case its possible that your laptops have knackered bios's, resulting in you recieveing the correct date and time in school where it pulls it from your domain controller but when you get home your clock has skewed so greatly that youve found yourself back in time?

 

(can you tell im making stabs in the dark now??)

 

though it is technically possible

(still)

[Scotmk]

hmmm

 

I think it may be to do with RM Synchronise! We are just checking things now.

[StewartKnight]

is port 43 open on the firewall?

[flamer117]

Hi

We had this and RM say the only way you can connect to HTTPS away from school is to have RMSyncronise installed on the laptop. I have tried this and it does work. Downside is using RMSync which causes its own problems. Dave

[buzzard]

could you not write a small script that resets the proxy settings whilst they are at home?

[flamer117]

HI

Well yes, but I have no idea where to start for this, don't understand why RMsyncronise has this effect. Dave

[matt40k]

could you not write a small script that resets the proxy settings whilst they are at home?

 

Or setup a pac file.

 

Basically if your ip is in the school range use the proxy server, if not, go direct.

 

Setup an internal only facing webserver, lob it on, change your iexplorer (whatever) to use it. When you go home, you can't see it, so it goes direct. When your at work, it uses it.

[flamer117]

Hi

At the moment staff go to the tools settings in connections and untick 'use proxy sever' when they are at home, this for the most of them works fine, but this is problem unless rmsyncronise is installed on the laptop the browser will not let them access any https: web sites.

 

This is needed to access easylink and other important https: web sites. See the dilema now.....

 

David Williams

 

Sorry made a mistake - RM syncronise has to be installed for access to https: away from the school site. This is what RM say anyway. I will try your suggestions and let you know. Cheers

Edited October 20, 2008 by flamer117

[matt40k]

If they do that, then try (fail), then close IE, then re-open, has it the box re-ticked it self?

 

I would try Firefox, just to see if it is an IE settings or a Windows\proxy setting

[nickje]

We had a similar problem to this when some of our laptops randomly mapped a users home directory incorrectly (our users AppData folder is held within their home directory).

[ezzauk]

Hi all, we get this sometimes at the college, it looks like to local gpo gets corupted. i just run a fix script on the ones that playing up.

 

secedit /configure /cfg %windir%\repair\secsetup.inf /db secsetup.sdb /verbose

 

Give that a go, i hope this helps.

 

Ezza