Comodo-signed SSL 2.0 certificate not working with Internet Explorer

Question

I'm having trouble getting my Comodo signed SSL Certificate to work with Internet Explorer in Apache2.

Internet Explorer gives an error that there is a problem with the certificate.

I tried all different combinations of SSLCipherSuite and SSLProtocol. I completely disabled SSL 3.0. Nothing helped.

Here are some options I tried: (not all at the same time)

SSLEngine On
SSLCipherSuite HIGH:MEDIUM
SSLProtocol all
SSLProtocol -all +SSLv2
SSLCipherSuite SSLv2:+HIGH:+MEDIUM:+LOW:+EXP
SSLCipherSuite ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL

My client complains because of SSL errors.

There is an Error with the SSL Certificate

I don't know the exact version of Internet Explorer they're using but I can reproduce the error with Internet Explorer 9.0 (activated SSL 2.0).

Answer 1

Have you considered that the certificate may either be revoked or just plain invalid?

In Internet Explorer, click the padlock button in the address bar when visiting the webpage. click "View Certificates" on the popup box. This will show you the Windows (not Internet Explorer) view of the certificate.

Internet Explorer may not trust your certificate for a variety of reasons: * The certificate may be invalid * The certificate may be trusted by a CA that your computer doesn't trust * The certificate may have been specifically revoked by the CA * The CA may have been specifically revoked by your machine (Comodo has been compromised in the past)