Where did you install Firefox from? Help Mozilla uncover 3rd party websites that offer problematic Firefox installation by taking part in our campaign. There will be swag, and you'll be featured in our blog if you manage to report at least 10 valid reports!

Avatar for Username

Rechercher dans l’assistance

Évitez les escroqueries à l’assistance. Nous ne vous demanderons jamais d’appeler ou d’envoyer un SMS à un numéro de téléphone ou de partager des informations personnelles. Veuillez signaler toute activité suspecte en utilisant l’option « Signaler un abus ».

Learn More

Ce sujet de discussion a été archivé. Veuillez poser une nouvelle question si vous avez besoin d’aide.

Secure Connection/SSL Handshake Issues on IIS Servers after being remediated with custom IIS Crypto settings

jlucas.plumchoice
jlucas.plumchoice
more options

We're having issues connecting via Firefox 61 and at least FF60 (possibly earlier) to systems which we have remediated with IIS Crypto (SCHANNEL remediation) using an altered version of their PCI 3.1 template (screen shots of settings attached).

IE 11 and Chrome 68 seem to work without issue, and when we check for like Cipher Suites, it seems to line up on at least one, but FF still fails to connect.

IIS Crypto Enabled settings: TLS 1.2 AES 128/128 and AES 256/256 SHA 256/384/512 PKCS and ECDH

I have included screen shots of the SCHANNEL config and the expected Cipher Suite order we have applied to the servers.

Any thoughts?

We're having issues connecting via Firefox 61 and at least FF60 (possibly earlier) to systems which we have remediated with IIS Crypto (SCHANNEL remediation) using an altered version of their PCI 3.1 template (screen shots of settings attached). IE 11 and Chrome 68 seem to work without issue, and when we check for like Cipher Suites, it seems to line up on at least one, but FF still fails to connect. IIS Crypto Enabled settings: TLS 1.2 AES 128/128 and AES 256/256 SHA 256/384/512 PKCS and ECDH I have included screen shots of the SCHANNEL config and the expected Cipher Suite order we have applied to the servers. Any thoughts?
Captures d’écran jointes

Toutes les réponses (1)

jlucas.plumchoice
jlucas.plumchoice Auteur de la question
more options

The specific error message we're getting in Firefox:

Secure Connection Failed

The connection to the server was reset while the page was loading. 

   The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
   Please contact the website owners to inform them of this problem.

Modifié le par jlucas.plumchoice