CODEWITHSUNDEEP
apacheinternet-explorercachingsslhttps
BurninLeo
BurninLeo

Reputation: 4474

Why does Internet Explorer cache expired SSL certificates (and can I do anything about it)?

I am using a Debian/Apache webserver with up-to-date software and a SSL certificate to encrypt the communication via HTTPS. In February the old certificate expired and I got me a new one (CA Geotrust via CA RapidSSL). Like the one before.

In Firefox (Chrome, ...) everything works fine. But after the old certificate finally expired after 2 weeks, Internet Explorer says the certificate has expired - leave the page? Appearently the old certificate is stuck in the browser cache and has not been updated since.

And the thing ain't done with clearing the browser cache. I actually had to reset the IE settings to make it reload the new certificate. As it works by now, I guess that the server delivers the correct certificate. But there are still other users who report the same problem - so it wasn't my browser alone.

My best guess is that something in the old cert or my cache suggestions told the IE to store the certificate for a long while. But I have no clue how to solve this - or even what to change so I don't have the same problem next year, again.

Thanks for any ideas!

BurninLeo

Upvotes: 0

Views: 5512

Answers (1)

PiR
PiR

Reputation: 175

I had a similar problem. In fact it is IE under XP who don't support several HTTPS subdomaine on a single IP address.

http://nginx.org/en/docs/http/configuring_https_servers.html#sni

So if you have also several domains or subdomains in same IP you can't solve this on XP/IE you can just choose which certificat is used by XP/IE but it will be the same for all subdomaine.

PiR

Upvotes: 1

Related Questions