XF 2.1 Internet Explorer 11 issue

[Mr Lucky]

A user has posted this:

Just very recently I have been unable to access the forum using Internet Explorer 11 and get the following message:

This page can’t be displayed

Turn on TLS 1.0, TLS 1.1, and TLS 1.2 in Advanced settings and try connecting to About the Café again. If this error persists, it is possible that this site uses an unsupported protocol or cipher suite such as RC4 (link for the details), which is not considered secure. Please contact your site administrator.

It still works fine with Chrome and from my iPhone.

I did what it suggested but TLS 1.0 to 1.3 were already turned on.

Perhaps it's something to do with my Norton 360, but I haven't found any other problematic websites.

I know nothing about IE11, does anyone know what the issue could be? Thanks

 

[Paul B]

Based on the message text it sounds like an issue between IE and the SSL cert on the server.

Not really anything which can be resolved from within XF.

 

[Kirby]

Does nayone know what the issue could be? Thanks

Yes, it's a TLS issue

SSL Server Test: cafesaxophone.com (Powered by Qualys SSL Labs)

www.ssllabs.com

The user is most likely using IE 11 on Windows 7 or 8:

IE 11 / Win 7 R Server sent fatal alert: handshake_failure
IE 11 / Win 8.1 R Server sent fatal alert: handshake_failure

If you really care for those ancient browsers (hint: Windows 7 support will finally end January 14th 2020) reconfigure cipher suites.

 

[MattW]

Yep, and I'm not really prepared to lower the TLS / SSL / Ciphersuites levels back down to support the older versions.

 

[Mr Lucky]

Yep, and I'm not really prepared to lower the TLS / SSL / Ciphersuites levels back down to support the older versions.

I suspected as much, and I agree totally.

 

[Kirby]

Yep, and I'm not really prepared to lower the TLS / SSL / Ciphersuites levels back down to support the older versions.

Understandable, tough it is possible to disable TLS 1.0/1.1 and still support IE 11

 

[Masetrix]

Understandable, tough it is possible to disable TLS 1.0/1.1 and still support IE 11

Hmmm... Not a problem.

Mozilla SSL Configuration Generator

An easy-to-use secure configuration generator for web, database, and mail software. Simply select the software you are using and receive a configuration file that is both safe and compatible.

ssl-config.mozilla.org

 

[Kirby]

Hmmm... Not a problem.

Yes, I know that it isn't a problem - hence I wrote that it is possible to disable TLS 1.0/1.1 and still support IE 11. So what do you mean with that post?

 

[Masetrix]

Yes, I know that it isn't a problem - hence I wrote that it is possible to disable TLS 1.0/1.1 and still support IE 11. So what do you mean with that post?

My mistake, misunderstanding.