Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Èròjà atẹ̀lélànà yii ni a ti fi pamọ́ fọ́jọ́ pípẹ́. Jọ̀wọ́ béèrè ìbéèrè titun bí o bá nílò ìrànwọ́.

Secure Connection/SSL Handshake Issues on IIS Servers after being remediated with custom IIS Crypto settings

  • 1 èsì
  • 1 ní ìṣòro yìí
  • 1 view
  • Èsì tí ó kẹ́hìn lọ́wọ́ jlucas.plumchoice

jlucas.plumchoice
jlucas.plumchoice
more options

We're having issues connecting via Firefox 61 and at least FF60 (possibly earlier) to systems which we have remediated with IIS Crypto (SCHANNEL remediation) using an altered version of their PCI 3.1 template (screen shots of settings attached).

IE 11 and Chrome 68 seem to work without issue, and when we check for like Cipher Suites, it seems to line up on at least one, but FF still fails to connect.

IIS Crypto Enabled settings: TLS 1.2 AES 128/128 and AES 256/256 SHA 256/384/512 PKCS and ECDH

I have included screen shots of the SCHANNEL config and the expected Cipher Suite order we have applied to the servers.

Any thoughts?

We're having issues connecting via Firefox 61 and at least FF60 (possibly earlier) to systems which we have remediated with IIS Crypto (SCHANNEL remediation) using an altered version of their PCI 3.1 template (screen shots of settings attached). IE 11 and Chrome 68 seem to work without issue, and when we check for like Cipher Suites, it seems to line up on at least one, but FF still fails to connect. IIS Crypto Enabled settings: TLS 1.2 AES 128/128 and AES 256/256 SHA 256/384/512 PKCS and ECDH I have included screen shots of the SCHANNEL config and the expected Cipher Suite order we have applied to the servers. Any thoughts?
Ìsopọ̀ yíyà aṣàfihàn

All Replies (1)

jlucas.plumchoice
jlucas.plumchoice Ìbéèrè olóhun
more options

The specific error message we're getting in Firefox:

Secure Connection Failed

The connection to the server was reset while the page was loading. 

   The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
   Please contact the website owners to inform them of this problem.

Ti ṣàtúnṣe nípa jlucas.plumchoice