Limit on number of CAcerts in HTTPS response?

busawreck · 08-06-2008, 01:45 AM

I have a web server with approx. 110 CAcerts installed, and it requests a client certificate on incoming HTTPS connections. I can not connect to this webserver using iexplorer. If I try I get the error "Internet Explorer cannot display the webpage". However if I disable the request for client certificates, OR if I remove most of the CAcerts installed it works fine. Furthermore, if I try and connect using another client, it works even with all CAcerts installed and request client certificates enabled. This leads me to believe that there is a limit in iexplorer.

I believe that as part of the SSL protocol, the web server sends the client a list of all its' trusted authorities when it receives an incoming HTTPS connection, in order for the client to select a client certificate that the server can validate. Perhaps if this list is too large the client (iexplorer) can't handle it, could this be the problem?

My software: WinXp, IExplorer 7.0.5730.11

08-06-2008, 01:45 AM	#1 (permalink)
busawreck Registered User Join Date: Aug 2008 Posts: 1 OS: XP	Limit on number of CAcerts in HTTPS response? I have a web server with approx. 110 CAcerts installed, and it requests a client certificate on incoming HTTPS connections. I can not connect to this webserver using iexplorer. If I try I get the error "Internet Explorer cannot display the webpage". However if I disable the request for client certificates, OR if I remove most of the CAcerts installed it works fine. Furthermore, if I try and connect using another client, it works even with all CAcerts installed and request client certificates enabled. This leads me to believe that there is a limit in iexplorer. I believe that as part of the SSL protocol, the web server sends the client a list of all its' trusted authorities when it receives an incoming HTTPS connection, in order for the client to select a client certificate that the server can validate. Perhaps if this list is too large the client (iexplorer) can't handle it, could this be the problem? My software: WinXp, IExplorer 7.0.5730.11