Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Lolu chungechunge lwabekwa kunqolobane. Uyacelwa ubuze umbuzo omusha uma udinga usizo.

Secure Connection/SSL Handshake Issues on IIS Servers after being remediated with custom IIS Crypto settings

jlucas.plumchoice
jlucas.plumchoice
more options

We're having issues connecting via Firefox 61 and at least FF60 (possibly earlier) to systems which we have remediated with IIS Crypto (SCHANNEL remediation) using an altered version of their PCI 3.1 template (screen shots of settings attached).

IE 11 and Chrome 68 seem to work without issue, and when we check for like Cipher Suites, it seems to line up on at least one, but FF still fails to connect.

IIS Crypto Enabled settings: TLS 1.2 AES 128/128 and AES 256/256 SHA 256/384/512 PKCS and ECDH

I have included screen shots of the SCHANNEL config and the expected Cipher Suite order we have applied to the servers.

Any thoughts?

We're having issues connecting via Firefox 61 and at least FF60 (possibly earlier) to systems which we have remediated with IIS Crypto (SCHANNEL remediation) using an altered version of their PCI 3.1 template (screen shots of settings attached). IE 11 and Chrome 68 seem to work without issue, and when we check for like Cipher Suites, it seems to line up on at least one, but FF still fails to connect. IIS Crypto Enabled settings: TLS 1.2 AES 128/128 and AES 256/256 SHA 256/384/512 PKCS and ECDH I have included screen shots of the SCHANNEL config and the expected Cipher Suite order we have applied to the servers. Any thoughts?
Ama-screenshot ananyekiwe

All Replies (1)

jlucas.plumchoice
jlucas.plumchoice Umnikazi wombuzo
more options

The specific error message we're getting in Firefox:

Secure Connection Failed

The connection to the server was reset while the page was loading. 

   The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
   Please contact the website owners to inform them of this problem.

Okulungisiwe ngu jlucas.plumchoice