Unable to Connect to SSL Web Site if Root Authority Is Unknown

ID: Q224144

The information in this article applies to:

SYMPTOMS

When you use Internet Explorer to connect to a secure sockets layer (SSL) Web site, Internet Explorer may stop responding (hang), and you may receive the following error message or one similar to it:

A connection with the Server could not be established.


CAUSE

This problem can occur if Internet Explorer does not recognize the Root Authority of the SSL Web site, and the Auto Proxy configuration file is configured to return an alternate Proxy Server to the client. When Internet Explorer is using a proxy array and fails to match the Secured Servers Root Authority with the one in it's local store, Internet Explorer internally adds the proxy used to established the connection to the Internet Explorer BadProxy Server list. Internet Explorer then tries to contact the next proxy server in the array, and if the next server is unavailable, Internet Explorer tries to locate the server, and if this is not successful, it generates a navigation error.


RESOLUTION

A supported fix that corrects this problem is now available from Microsoft, but it has not been fully regression tested and should be applied only to systems experiencing this specific problem. If you are not severely affected by this specific problem, Microsoft recommends that you wait for the next Internet Explorer Service Pack that contains this fix.

To resolve this problem immediately, contact Microsoft Product Support Services to obtain the fix. For a complete list of Microsoft Product Support Services phone numbers and information on support costs, please go to the following address on the World Wide Web:

http://www.microsoft.com/support/supportnet/overview/overview.asp
The English version of this fix should have the following file attributes or later:

Date Time Version Size File name Platform
03/11/99 12:52 4.72.3515.1100 363,000 bytes Wininet.dll (x86)


NOTE: If this product was already installed on your computer when you purchased it from the Original Equipment Manufacturer (OEM) and you need this fix, please call the Pay Per Incident number listed on the above Web site. If you contact Microsoft to obtain this fix, and if it is determined that you only require the fix you requested, no fee will be charged. However, if you request additional technical support, and if your no-charge technical support period has expired, or if you are not eligible for standard no-charge technical support, you may be charged a non-refundable fee.

For more information about eligibility for no-charge technical support, see the following article in the Microsoft Knowledge Base:
Q154871 Determining If You Are Eligible for No-Charge Technical Support


STATUS

Microsoft has confirmed this to be a problem in the Microsoft products listed at the beginning of this article.

Additional query words: 


Keywords          : kbenv kberrmsg msiew95 msient msiew98 
Version           : WINDOWS:4.01 Service Pack 1,4.01 Service Pack 2
Platform          : WINDOWS 
Issue type        : kbprb

Last Reviewed: July 2, 1999