CODEWITHSUNDEEP
azuresslinternet-explorer-8windows-xp
Maximo Dominguez
Maximo Dominguez

Reputation: 2085

Certificate error in Internet Explorer 8 in windows XP

The project my teammates and I are working on is having security issues with internet explorer 8 running on windows xp.

Our app is hosted in a dedicated instance of Azure Websites, and has a EV certificate issued by GeoTrust. The certificate works correctly on all browsers, except Internet Explorer 8 running on windows xp. We get the following warning:

The security certificate presented by this website was issued for a different website's address.

When I go to View certificates I only see the certificate issue to *.azurewebsites.net by MSIT Machine Auth CS 2.

We found more information about this issue on a previous question: IE8 SSL Cert Problems while other browsers work like a charm

And the solution is to remove the SNI configuration on IIS, but we can’t do that on azure websites. What can we do?

Upvotes: 6

Views: 4364

Answers (2)

user3019087
user3019087

Reputation: 27

Just in case ... the SNI also seems to confuse the Android Bluefire Reader. We have a website that allows registered users to download bought ebooks and the direct download to Bluefire stopped working after the move to Azure. Once we chaged the setings of the certificates in Azure, both IE+WinXP and Blufire started working.

Upvotes: 0

Joachim Isaksson
Joachim Isaksson

Reputation: 180927

Most likely, you're sharing an external IP address (non dedicated azure websites?) and it's not working since since IE8 on Windows XP does not support Server Name Indication.

Getting a dedicated instance should solve your problem, although I've not tested whether a dedicated azure web site gets its unique IP or not so you may want to try it yourself.

Update: It would seem that you can indeed choose not to use SNI when uploading the certificate to a standard mode azure web site.

Upvotes: 4

Related Questions