Ssl – FireFox detects Revoked Certificate, IE does not

firefoxinternet explorerrevokedssl

Our exchange web access is secured by an SSL certificate. When I try to visit the web access in FireFox (v2 and v3.5), I get:

Secure Connection Failed       

An error occurred during a connection to www.example.net.au.

Peer's Certificate has been revoked.

(Error code: sec_error_revoked_certificate)

When I view the site in IE, it loads just fine, without any errors or warnings. When I view the certificate I see that it doesn't expire until 2010 and the certification path goes back to thawte.

I've seen revoked certificates in IE before and it usually flat out denies access to the site. What could cause FireFox to have a hernia about it, but IE does not detect anything wrong?

(Please, no flaming about choice of browser)

Best Answer

Go to the site, and look at the certificate properties and see if it includes the URL where the CA publices their certificate revocation lists. Retrieve that list and see if the certificate is listed.

What version of IE are you running? In older versions CRLs where not checked, I forget what version Microsoft added CRL support in. I think you can disable CRL checking in IE, which make me wonder if CRL checking is disabled on your system.