IE8 SSL certificate issues while other browsers work like a charm

Question

I bought an SSL certificate that should work with iE 5+, but it does not work. All other browsers that I tested work fine - no errors - just the site I want to display. But IE8 and smaller versions show an error on https ... (they must accept the ssl cert site) and destroy the layout on the http version of the site (without https links).

Not SSL minol-fb.de/facebook-suche/

SSL minol-fb.de/facebook-suche/

Well, it seems that the browser <IE8 is still using a self-signed certificate.

Answer 1

You had to configure several certificates using the server name pointer without knowing it.

If you use this, you get a self-signed certificate:

openssl s_client -showcerts -connect www.minol-fb.de:443 

If you use this (with the server name), you will receive the correct certificate:

 openssl s_client -showcerts -connect www.minol-fb.de:443 -servername www.minol-fb.de 

You will probably act differently with older versions of IE because you are testing them on XP. Unfortunately, IE does not support SNI in Windows XP. Other browsers (with fairly recent versions) do, at least regardless of the version of the OS on which they work.

If you do not need this other host, you can remove this configuration so that you do not rely on SNI at all.

Answer 2

Something strange is happening; if you use the link below, you will see that the server does not return the server certificate and the intermediate certificate, but one independent CA Parallels Plesk Panel certificate.

http://certlogik.com/ssl-checker/www.minol-fb.de

Using the openssl command below, I get the same Plesk certificate that was returned:

 openssl s_client -showcerts -connect www.minol-fb.de:443 

Perhaps this may help:

http://knowledgelayer.softlayer.com/questions/457/Installing+a+SSL+Certificate+in+Plesk+9

UPDATE:

Looks like you made out the configuration; using the above tool, I see that the correct certificates are now being returned.

Answer 3

I faced a similar situation when the certificate worked fine in all browsers except IE (of course!). This is on Apache and an SSL certificate has been issued by RapidSSL. In my case, it turned out that I had a default-ssl active virtual host file, so somehow IE gathered about this in the default self-signed certificate instead of the fastSSL certificate mentioned on my site virtual host.

Deactivated ssl-default, restarted apache, and he did it.