none
win7 IE9, does not recognize SSL certificate, winXP SP3 IE8, SSL page time out

    Question

  • Hello Microsoft Support,

    Update on the issue described below with IE8. I have tested my web site on a third system at another office location and it is apparently working properly with that IE8 browser with the OS of win XP SP3. The failure appears to be localized to these two systems here in this office location. Both are running the Dell OEM version of win XP SP3 original factory installation from the vender.

    IE8 v8.0.6001.18702
    cipher strength: 128 bit
    PID: 01398-997-0011903-00102
    update version: 0

    There is an encryption issue with these browsers, how do I determine which direction to solve the issue, or know if it will occur on other systems, Dell or Microsoft?

    The issue with win7 IE9 still has not been addressed, it is at another location on the west coast which I am nearer the east coast. So I am trying to get a screen shot of the error from the gentleman in my assistance.

    Any information regarding this issue will be greatly appreciated.

    Thank you

    ------------------------------------------------------------------------------------------------------------------

    I am having an issue with IE8 with my new web site while it is being served in SSL. I have checked my site in Firefox and it is working flawlessly and very fast while loading the pages in both unsecured and SSL sides. The site is written in PHP and XHTML 2.0 / CSS 2.1 and mySQL. There are no errors in the scripts or markup. When going from my home page (unsecured) with a direct link to ether the login or registration pages both in SSL in IE8 it is a little slow compared to Firefox (differences in the engines) but is loading the full page ok. But when logging in or registering, the scripts become more complex and several more things come into use, this is when IE8 fails 100% of the time, ether timing out or rendering the next page with out any CSS, has trouble with images as small as 16Kb in size and animated GIF's. I have tested the site on two systems at my location and a mobile device with Firefox and IE8 (Win XP SP3 all updates are current) and Firefox and mobile browser Bolt have worked very fast and have never failed, while on one system using IE8 fails 80% of the time and needs to have the cashe cleared between tests and the other system IE8 has been reset to the default isntall, addons disabled, SSL cashe cleared and IE8 fails on this system 100% of every test, timing out or redering a page without any CSS or images (16Kb images). Both systems have trouble loading animated GIF's. But when pages are rednered on port 80 unsecured there is no issues and page load times on all systems are within normal limits. Firefox is very fast and works flawlessly in all conditions, but I know that 90% of my visitors will be using IE8 or IE9 so it is important that I get this resolved. I have read the bulletins on this subject and have tried the suggestions with no positive results. I will explain some of the changes in the scripts that are in use when this issue is a problem. During a login: (POST, GET, mySQL, GZIP compression, PHPSELF (page posts to itself), meta refresh) these are the major differences in the script after the direct link from the home page (http) to the login page (SSL) and the pages following the login page. All pages on this site use GZIP compression and to resolve another issue regarding IE8 intermittently rendering CSS position absolute 80px+ float to the right uncorrectable, reseting IE8 to the default install fixed the issue. I am hoping using the meta tag <meta http-equiv="X-UA-Compatible" content="IE=7" /> to force IE8 into IE7 compatibility mode will prevent the same issue with my visitors. I suspect maybe an issue with the SSL certificate on my server to possibly be the cause of the current issue with IE8, it is new and a higher encryption level then the previous ones from this certificate authority. I have written scripts for SSL in the past and have never had this issue then, so I am looking for something that is new in the variables of this issue. Please contact me in how to further discuss this matter and give you the test credentials to login outside of this public forum.

     

    Thank you.

     

    To update, I have found that changing the cypher type from CBC/OBF to CTR seems to improve page load quite a lot. So it may be that there are corrupted characters in the internet address string, something the other browsers may ignore but IE8 can not. I need some technical information on that subject and limits of the IE8 engine please.

     

    Issue with win7 IE9, does not recognize SSL certificate on my web site. The root certificate list in IE9 does not list the certificate authority. I have called the certificate authority, they are not aware of any know issue of this kind, they have not yet tested the certifacate in a windows 7 IE9 environment. The certificate authority I use is Godaddy/Starfield, verification of my SSL certificate for my web site bizbooksite.com is: https://seal.godaddy.com/verifySeal?sealID=MKYM6DJQJKQE3CIVJrbrdnVL1wGTd1XHWypTX1RFXyT7xRGAvwvMFKdGrJmk


    Please assist with further information.

     

    Thank you,

    Web Development for BizBook, bizbooksite.com

    Wednesday, December 14, 2011 10:37 PM

Answers

  • I have resolved all the issues with MSIE8. Changed: <meta http-equiv="X-UA-Compatible" content="IE=7" /> To this value: <meta http-equiv="X-UA-Compatible" content="IE=8" /> It was the IE7 compatible setting that causes all the issues, and cleaning up the address string by running the url string through PHP urlencode() first cleaned off any non-ascii charactors or corrupt data within the url address string. It all now works flawlessly. Thank you for your help. Still waiting for more data on why MSIE9 does not except the web site SSL cert.
    Thursday, January 05, 2012 4:00 AM

All replies

  • Hi,

     

    You can submit this suggestion or feedback to Microsoft Connect feedback Center in formal format. Microsoft engineers will evaluate them seriously and report to Product Group.

    http://connect.microsoft.com/VisualStudio/

     

    In your feedback, you can quote the URL to this thread, so that the whole conversation can be available. Every feedback submitted will be evaluated carefully by our engineers. They will let you know their comments further through that portal. It would be great if you can also paste the link to the submitted feedback here, so that other community members can see it as well.

     

     

    Best regards,

    Jesse

     


    Jesse Jiang [MSFT]
    MSDN Community Support | Feedback to us
    Friday, December 16, 2011 9:54 AM
  • Jesse Jiang [MSFT], Thank you for the information to forward this data to the proper departments in Microsoft engineering. I do understand the difficulties in bringing the IE series technology into such a very broad range type of internet browser, if I am not in error Microsoft has been developing a browser that attempts to produce web pages under a broad range of loose markup and CSS. Taking into account not every site is developed with the same care, knowledge, experience etc. So to have one browser work very well on them all instead of only having W3C compliant browsers, sites loosely written CSS fall apart in them of course and look fine in MSIE, in theory and for the most part that is true. And along with that some things will be sacrificed due to the current technologies restrictions and requirements, I am willing to have the performance decrease under those design implements, as for this issue I must advise further review of complete functionality impairment, malfunction and more than likely a serious possibility of SSL exploits between servers, clients and the clients OS, browser and internet connection and third parties make this a much more serious issue for the engineers at Microsoft than I, a web developer working with a very different way of securing the clients data and the security of the site its self. I of course can not say of how it works, but I can say that it is not done in any standard way, browser cookie or even client sided. As soon as it begins MSIE becomes completely impaired and malfunctions. I will forward the data ASAP, I am very busy but I will find time soon. Any other information from or to me, Microsoft may contact me directly by the email address used in this forum. This project is within the projected time but as this issue continues unresolved that will begin to change to become much less desirable a time frame. Thank you, BizBook web site development offices/dd12.16.2011
    Friday, December 16, 2011 11:02 AM
  • Friday, December 16, 2011 11:22 AM
    1. This is a screen shot of the CSS errors that occur only while in SSL on IE8. They have been intermittent, have corrected them selves once and now are back again. No changes to the page markup or CSS has happened during this time. Look at the bottom links, the bottom of the characters are “cut off” (the tails of the “g” and “y”). There should be underlined links and now they are not.

    Only in SSL and also intermittently. I am understanding that the CSS information is being corrupted by the cipher process. At times no CSS will be rendered at all or the page will time out. Again only in SSL and the total page size is very small and only two small images, they will not load properly ether, all data is being corrupted by a impaired cipher process, that is the exploit.

    1. This is a screen shot of Firefox showing the exact page and all the errors from MSIE8 are now perfectly correct rendered how they should be.

     


    Saturday, December 17, 2011 7:15 AM
    1. Here are samples of the errors of MSIE8 rendering CSS position absolute floating +80px incorrectly to the right. This is not the same issue as with the SSL data coruption issue.

    Again these are intermittent malfunctions and not anything that can be adjusted in the markup or CSS, or by conditional comments. The errors will correct “themselves” at times and work perfectly again, but this is not in SSL, the referring page was SSL.

    See below, first MSIE8 during a malfunction, then the page rendering properly in Firefox. (same day, time, etc.)

    MSIE8:


    Now the same page in Firefox:



    Saturday, December 17, 2011 7:38 AM
  • I have resolved all the issues with MSIE8. Changed: <meta http-equiv="X-UA-Compatible" content="IE=7" /> To this value: <meta http-equiv="X-UA-Compatible" content="IE=8" /> It was the IE7 compatible setting that causes all the issues, and cleaning up the address string by running the url string through PHP urlencode() first cleaned off any non-ascii charactors or corrupt data within the url address string. It all now works flawlessly. Thank you for your help. Still waiting for more data on why MSIE9 does not except the web site SSL cert.
    Thursday, January 05, 2012 4:00 AM