Exchange Outlook Web App Issue in Chrome

[colly72]

Hi all,

 

We are experiencing a weird problem in Google Chrome, when trying to access Outlook Web App. Since the weekend, we've been unable to access the web app via Chrome and get an ERR_CONNECTION_RESET message when trying to do so. We've rebooted the Exchange (2010) servers, which then solved the problem on IOS devices, but desktop versions of Chrome (Windows and Mac), still can't access it. The issue does not manifest itself on IE, Firefox or Safari. We've also tried reverting back to older versions of Chrome, with no success. I've looked into the SSL cert and made sure that the site bindings are correct too.

 

Has anyone else experienced a similar issue?

[colly72]

This problem is definitely a Chrome issue. Managed to install an older (v43) version and OWA works fine. Little to no info on the web about this problem though, which seems strange.

[Steve21]

Dumb question, but are you using an old style SSL cert? Google recently decided to nuke a bunch of the ones they deem "bad"

 

There should be more details on the "error details" screen which say something like ERR_SSL_VERSION_OR_CIPHER_MISMATCH

 

Steve

[colly72]

Don't think so, it's a GoDaddy UCC SAN certificate, although the error details are not very helpful. It just states that the webpage might be temporarily down or moved permanently to a new address.

[colly72]

It is a SHA-256 cert though, which i believe should be OK?

[colly72]

I think I've narrowed this down to the new version of Chrome disabling websites that use RC4 ciphers. I think Firefox is also affected too. I'm updating the registry to disable RC4 and SSL3 on the mail server, although this requires a reboot to take effect, so I'll update this thread again, once it's been rebooted.

[Max_Power]

Had similar problems with Citrix on any modern browser and had to disable the RC4 and enable AES instead. Mail has been un-effected (up to now).

[colly72]

I think it's version 48 of Chrome and version 43 of Firefox, where the problem starts, as they are blocking any sites using insecure RC4.

 

You can test the SSL cert via https://www.ssllabs.com/ssltest/

Edited February 8, 2016 by colly72

[colly72]

Ok, to wrap this up, I applied the changes to the registry, to disable SSL3.0 and RC4, then rebooted the mail server. All is now working as expected.