Internet Explorer cannot display this web page (ssl self-signed cert.)

Question

Internet Explorer

Started after installing the latest updates this week. The intranet site stopped opening via https with a self-signed certificate. Moreover, it began not to open only in IE (7,8), In other browsers it opens including IE9 (!), Here are the certificate / connection data:

The connection to agent.local is encrypted using 256-bit encryption.

This connection uses the TLS 1.0 protocol.

AES_256_CBC with SHA1 is used for message authentication, DHE_RSA is used for key exchange.

The server does not support TLS connection resumption.

Moreover, when trying to open it in IE, it doesn’t even contact the server - they looked at the logs, and immediately “cannot display this web page”.

Certificate valid by date.

Pereprobyval everything that is in the search:

- reset the IE settings;
- cleared the ssl cache;
- netsh - everything that can be reset;
- settings TLS 1.0, SSL in IE - enabled;
— domain in Trusted sites;
- the server was rebooted;
- there is no data in the server logs when opening a site with IE, i.e. there is not even access;
- firewall, antiviruses - disabled;
- machines were checked for viruses using cureit.

And only our site does not open, I tried others with self-signed certificates - they open in IE (7,8) I can’t understand why.

Advice to change on the TLS server is not yet accepted, tk. it is boxed and not so easy to do, and even more so, I did not find definitions that IE (7,8) stopped supporting TLS 1.0

This behavior is observed on all IE available to me on different computers. This is only about WinXP.

Answer 1

Found the answer and solved the problem: maybe. someone needs it: blogs.technet.com/b/pki/archive/2012/07/13/blockin...

Answer 2

had a similar problem
turned out to be a SHA-256 certificate,
which is not supported in all windows. helped KB 938397 and KB 968730