up vote 2 down vote favorite
share [g+] share [fb]

It seems that every time Windows auto-installs security updates, all of our secure sites return "connection was reset..." messages. After I remove and reapply new self-signed SSL certificates, the sites are back up and running. All of our sites with Verisign or Network Solutions certs are never affected by these updates.

2 questions:

  1. Does anyone know why this happens?
  2. Is it possible to avoid this issue, without requiring the purchase of trusted certs?
link|improve this question
If it helps, our certificates are generated using SelfSSL – Keith Jul 29 '09 at 18:15
What do you mean by "remove and reapply new self-signed SSL certificates"? Please elaborate a bit. – Evan Anderson Jul 29 '09 at 18:17
Remove the old certificate through IIS, then run SelfSSL to generate and apply a new cert to the site. Once I do that, the site is back up and running. – Keith Jul 29 '09 at 18:31
1  
If you scroll down to "Pawel"s comment on this stackoverflow question, you can see that he mentions this exact scenario: stackoverflow.com/questions/124392/… – Keith Jul 29 '09 at 18:53
feedback

1 Answer

up vote 2 down vote

There is a setting in IE to download new certificate authority lists. It's possible that any custom authorities are deleted when the list is updated.

link|improve this answer
Thank you, I will look into this. Since this is a web server, I am not concerned with having the most up-to-date certificate authority list. – Keith Jul 29 '09 at 18:32
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.