KB165670 - NetScape Navigator Hangs Connecting to Secure IIS Server with 128-bit Key

Article ID: 165670

Article Last Modified on 6/23/2005

Microsoft Internet Information Server 2.0
Microsoft Internet Information Server 3.0

This article was previously published under Q165670

We strongly recommend that all users upgrade to Microsoft Internet Information Services (IIS) version 6.0 running on Microsoft Windows Server 2003. IIS 6.0 significantly increases Web infrastructure security. For more information about IIS security-related topics, visit the following Microsoft Web site:

http://www.microsoft.com/technet/security/prodtech/IIS.mspx

SYMPTOMS

When you use IIS 2.0 or 3.0, and you secure the site with a 128-bit key from Verisign (or some other legitimate provider), Netscape Navigator version 3.0 appears to hang.

CAUSE

If the computer hosting the IIS server was originally set with 128-bit security, and then a Service Pack was applied that overwrote the 128-bit Schannel.dll file then Navigator will not connect if it is set to use Secure Sockets Layer (SSL) 3 security.

WORKAROUND

By default, Navigator installs with SSL 3 security enabled. To connect to the site, either disable SSL 3 security or replace the newer 40-bit Schannel.dll file on the server with the proper 128-bit file.

Keywords: kbprb kbtshoot KB165670