Keywords: WINDOWS XP, CERTIFICATES, IE 8.0, SSL, https, NOVEMBER 2014
___
In November 2014 I noticed that my Win XP Professional no more was able to connect to some SSL connection secured HTTPS sites.
For instance this Geotrust site was out of scope of XP Internet Explorer 8.0. https://www.geotrust.com/resources/root-certificates/
When trying to connect to Geotrust IE raised “Internet Explorer cannot display the webpage”. Firefox on the same XP worked all the time on all HTTPS sites.
Our real problem was that we use some third party banking Web Services applications that rely on Windows DLLs and secured SSL connections it offers.
On windows 7 and IE 11 version those Web Service banking applications worked all right. I tried everythin in XP machines, renewing certificates to IE etc, but nothing seemed to solve it. For a couple of weeks I thought something has got so old in Win XP that those certain SSL-connections just will work.
___
But then bingo!! I found this article about SSL 3,0 vulnerability, dated 14 October 2014.
https://blog.mozilla.org/security/2014/10/14/the-poodle-attack-and-the-end-of-ssl-3-0/
So its seems that SSL 3.0 era has ended, and in the future secure tunnels will be built using TLS layers
http://en.wikipedia.org/wiki/Transport_Layer_Security
Fortunately old Windows XP also does know something about TLS 1.0, it is builts in there. Finally the only thing I had to do in IE 8.0 was to go Tools -> Internet Options -> Advanced and there tick the box “Use TLS 1.0”.
After making this TLS setting also that Geotrust site started to open again with Win XP IE 8.0 combination. And of course the Web Services banking applications also started to work on XP machines again.
___
In November 2014 I noticed that my Win XP Professional no more was able to connect to some SSL connection secured HTTPS sites.
For instance this Geotrust site was out of scope of XP Internet Explorer 8.0. https://www.geotrust.com/resources/root-certificates/
When trying to connect to Geotrust IE raised “Internet Explorer cannot display the webpage”. Firefox on the same XP worked all the time on all HTTPS sites.
Our real problem was that we use some third party banking Web Services applications that rely on Windows DLLs and secured SSL connections it offers.
On windows 7 and IE 11 version those Web Service banking applications worked all right. I tried everythin in XP machines, renewing certificates to IE etc, but nothing seemed to solve it. For a couple of weeks I thought something has got so old in Win XP that those certain SSL-connections just will work.
___
But then bingo!! I found this article about SSL 3,0 vulnerability, dated 14 October 2014.
https://blog.mozilla.org/security/2014/10/14/the-poodle-attack-and-the-end-of-ssl-3-0/
So its seems that SSL 3.0 era has ended, and in the future secure tunnels will be built using TLS layers
http://en.wikipedia.org/wiki/Transport_Layer_Security
Fortunately old Windows XP also does know something about TLS 1.0, it is builts in there. Finally the only thing I had to do in IE 8.0 was to go Tools -> Internet Options -> Advanced and there tick the box “Use TLS 1.0”.
After making this TLS setting also that Geotrust site started to open again with Win XP IE 8.0 combination. And of course the Web Services banking applications also started to work on XP machines again.
Vastaukset
Vanhimmat
Ei vielä vastauksia
Aloittaja odottaa vastauksia. Kerro oma näkemyksesi ensimmäisenä.