IE7 on Vista not displaying an aspx page under SSL 2.0
Hello, We are having problem displaying a page on IE7 running on Vista. Below is what we have seen while trying to view a page that is being served under a site with SSL 2.0: The url returns "Page can not be displayed." On IE7 running on Vista. Use SSL 2.0 us checked on IE7. On IE7 running on XP, the page displays the same error message unless "Use SSL 2.0" is checked. On Vista, with FireFox, the page displays if security.enable_ssl2 AND security.ssl2.des_64 are set to true. http://community.sgdotnet.org/blogs/maungmaung/archive/2007/03/29/Windows-Vista-Harden-Security-_2800_Part-2_2900_.aspxSays we need to add the followings to Group Policy Object Editor/Computer Configuration/Administrative Templates/Network/SSL Configuration Settings/SSL Cipher Suite Order:"TLS_RSA_WITH_DES_CBC_SHA,SSL_RSA_WITH_DES_CBC_SHA," This seems agree with what is stated at http://support.microsoft.com/kb/929708. However, adding the entries did not help. Looking at the section labeled "All available cipher suites:" of SSL Cipher Suite Order, I did not find the two: TLS_RSA_WITH_DES_CBC_SHA and SSL_RSA_WITH_DES_CBC_SHA Below is what are listed under "All available cipher suites:" currently on our vista machine:TLS_RSA_WITH_AES_128_CBC_SHA TLS_RSA_WITH_AES_256_CBC_SHA TLS_RSA_WITH_RC4_128_SHA TLS_RSA_WITH_3DES_EDE_CBC_SHA TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA_P256 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA_P384 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA_P521 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA_P256 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA_P384 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA_P521 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA_P256 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA_P384 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA_P521 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA_P256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA_P384 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA_P521TLS_DHE_DSS_WITH_AES_128_CBC_SHA TLS_DHE_DSS_WITH_AES_256_CBC_SHA TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHATLS_RSA_WITH_RC4_128_MD5 SSL_CK_RC4_128_WITH_MD5 SSL_CK_DES_192_EDE3_CBC_WITH_MD5 TLS_RSA_WITH_NULL_MD5 TLS_RSA_WITH_NULL_SHATLS_RSA_WITH_DES_CBC_SHATLS_DHE_DSS_WITH_DES_CBC_SHATLS_RSA_EXPORT1024_WITH_RC4_56_SHATLS_RSA_EXPORT1024_WITH_DES_CBC_SHATLS_DHE_DSS_EXPORT1024_WITH_DES_CBC_SHATLS_RSA_EXPORT_WITH_RC4_40_MD5SSL_CK_DES_64_CBC_WITH_MD5SSL_CK_RC4_128_EXPORT40_WITH_MD5 Could it be that we need to somehow add the two so that it will appear on the list, "All available cipher suites:"?If yes, how can we add the two to the "All available cipher suites:" list? Any help would be greatly appreciated. Thank you.
August 15th, 2007 5:04pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics