0

I'm getting an error on multiple servers (on the same network) when using IE11 and navigating to the following site: https://wllearning.com.au

It produces the following two errors on page load:

The security certificate presented by this website has expired or is not yet valid.

The security certificate presented by this website was issued for a different website's address.

If I click to continue past the SSL error and view the certificate it seems to be for a completely different site "*.silverstripe.com.au".

Incorrect SSL certificate

Now for the strange part, it doesn't always return this, sometimes just refreshing the page will result in the correct cert.

Correct SSL certificate

It seems the issue ONLY occurs on IE, Chrome works fine. I did consider that it might be similar to the SNI issue listed on other server fault questions but an SNI issue requires multiple sites using one IP I believe, and a reverse DNS lookup shows only one site associated with the IP address.

Reverse DNS lookup

Note that there is no proxy service on the network having the issue and DNS does report the correct IP address. NSlookup using local and Google DNS servers

How can I further troubleshoot this issue?

Community
  • 1
Jake Nelson
  • 255
  • 2
  • 8
  • Is there just a single web server? Or, do you have your servers load balanced? – Appleoddity Jul 20 '17 at 02:25
  • It's not our website do I don't know the configuration. The servers that are struggling to access the site are RDS servers being used by staff. Sorry, I should have specified that. – Jake Nelson Jul 20 '17 at 03:07

1 Answers1

1

The unique IP in the reverse DNS response does not prove there are not multiple web servers managed by SNI on this host (most people do not set multiple PTR records when multihosting with SNI). In fact, there are multiple servers managed by SNI: just try https://{ip address of wllearning.com.au} and you will get the certificate for *.silverstripe.com.au.

Internet Explorer may have cached a bad redirect for this site. Try https://www.wllearning.com.au instead of https://wllearning.com.au If it does not work, try to create a new Windows account and connect to https://wllearning.com.au with IE on this new account. If this works, it means that IE has cached something and this explains the problem you have encountered.

Alexandre Fenyo
  • 330
  • 1
  • 7