We're calling on all EU-based Mozillians with iOS or iPadOS devices to help us monitor Apple’s new browser choice screens. Join the effort to hold Big Tech to account!

Avatar for Username

搜索 | 用户支持

防范以用户支持为名的诈骗。我们绝对不会要求您拨打电话或发送短信，及提供任何个人信息。请使用“举报滥用”选项报告涉及违规的行为。

详细了解

话题已存档。 如果需要帮助请提出新问题。

Secure Connection/SSL Handshake Issues on IIS Servers after being remediated with custom IIS Crypto settings

jlucas.plumchoice
jlucas.plumchoice
more options

We're having issues connecting via Firefox 61 and at least FF60 (possibly earlier) to systems which we have remediated with IIS Crypto (SCHANNEL remediation) using an altered version of their PCI 3.1 template (screen shots of settings attached).

IE 11 and Chrome 68 seem to work without issue, and when we check for like Cipher Suites, it seems to line up on at least one, but FF still fails to connect.

IIS Crypto Enabled settings: TLS 1.2 AES 128/128 and AES 256/256 SHA 256/384/512 PKCS and ECDH

I have included screen shots of the SCHANNEL config and the expected Cipher Suite order we have applied to the servers.

Any thoughts?

We're having issues connecting via Firefox 61 and at least FF60 (possibly earlier) to systems which we have remediated with IIS Crypto (SCHANNEL remediation) using an altered version of their PCI 3.1 template (screen shots of settings attached). IE 11 and Chrome 68 seem to work without issue, and when we check for like Cipher Suites, it seems to line up on at least one, but FF still fails to connect. IIS Crypto Enabled settings: TLS 1.2 AES 128/128 and AES 256/256 SHA 256/384/512 PKCS and ECDH I have included screen shots of the SCHANNEL config and the expected Cipher Suite order we have applied to the servers. Any thoughts?
已附加屏幕截图

所有回复 (1)

jlucas.plumchoice
jlucas.plumchoice 提问者
more options

The specific error message we're getting in Firefox:

Secure Connection Failed

The connection to the server was reset while the page was loading. 

   The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
   Please contact the website owners to inform them of this problem.

由jlucas.plumchoice于修改