It seems that every time Windows auto-installs security updates, all of our secure sites return "connection was reset..." messages. After I remove and reapply new self-signed SSL certificates, the sites are back up and running. All of our sites with Verisign or Network Solutions certs are never affected by these updates.

2 questions:

  1. Does anyone know why this happens?
  2. Is it possible to avoid this issue, without requiring the purchase of trusted certs?
  • If it helps, our certificates are generated using SelfSSL – Keith Jul 29 '09 at 18:15
  • What do you mean by "remove and reapply new self-signed SSL certificates"? Please elaborate a bit. – Evan Anderson Jul 29 '09 at 18:17
  • Remove the old certificate through IIS, then run SelfSSL to generate and apply a new cert to the site. Once I do that, the site is back up and running. – Keith Jul 29 '09 at 18:31
  • 1
    If you scroll down to "Pawel"s comment on this stackoverflow question, you can see that he mentions this exact scenario: stackoverflow.com/questions/124392/… – Keith Jul 29 '09 at 18:53

There is a setting in IE to download new certificate authority lists. It's possible that any custom authorities are deleted when the list is updated.

  • Thank you, I will look into this. Since this is a web server, I am not concerned with having the most up-to-date certificate authority list. – Keith Jul 29 '09 at 18:32

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.