Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

It seems that every time Windows auto-installs security updates, all of our secure sites return "connection was reset..." messages. After I remove and reapply new self-signed SSL certificates, the sites are back up and running. All of our sites with Verisign or Network Solutions certs are never affected by these updates.

2 questions:

  1. Does anyone know why this happens?
  2. Is it possible to avoid this issue, without requiring the purchase of trusted certs?
share|improve this question
    
If it helps, our certificates are generated using SelfSSL –  Keith Jul 29 '09 at 18:15
    
What do you mean by "remove and reapply new self-signed SSL certificates"? Please elaborate a bit. –  Evan Anderson Jul 29 '09 at 18:17
    
Remove the old certificate through IIS, then run SelfSSL to generate and apply a new cert to the site. Once I do that, the site is back up and running. –  Keith Jul 29 '09 at 18:31
1  
If you scroll down to "Pawel"s comment on this stackoverflow question, you can see that he mentions this exact scenario: stackoverflow.com/questions/124392/… –  Keith Jul 29 '09 at 18:53

1 Answer 1

There is a setting in IE to download new certificate authority lists. It's possible that any custom authorities are deleted when the list is updated.

share|improve this answer
    
Thank you, I will look into this. Since this is a web server, I am not concerned with having the most up-to-date certificate authority list. –  Keith Jul 29 '09 at 18:32

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.