Text View
Html View
Page Cannot Be Displayed Error During SSL 3.0 Server Session Timeout
View products that this article applies to.
This article was previously published under Q305217
SYMPTOMS
When Internet Explorer version 5.5 Service Pack 1 or later tries to POST data,
GET data or set up an HTTPS connection with the connect command, Internet
Explorer generates an error message that indicates that the page could not be
displayed. This problem does not occur in Internet Explorer 5.5.
CAUSE
This problem can occur when the Web server issues an SSL 3.0 closure alert as
the port is being closed on the server, because of a possible session timeout.
This closure alert is sent across as a Zero Byte Encrypted packet, however, the
complete closure message occurs by using 2 different packets. The closure alert
arrives with the TCP Flags ".AP..." (Ack Push) to instruct the program that the
SSL 3.0 session is closing and another packet with the TCP Flags
".A...F" (Ack Fin) to instruct the TCP layer to close the port on the client
computer.
Because the closure alert arrives and the RESET and FIN TCP flags are not set
within that packet, there is no way for Wininet.dll to determine that this is
not program data, and because of this, the Keep-Alive port is left open on the
client until the next Socket Receive call.
This causes the problem to occur because Internet Explorer has two Keep-Alive
ports open to the server and the Retry count is equal to 2. When the Socket
Receive occurs after the first attempt to send data, the SSL 3.0 closure alert
is processed and the TCP closure is processed causing the first Keep-Alive port
to be closed and the Retry count to be decremented. Because the retry count is
not 0, there is another POST attempt that uses the second Keep-Alive port.
However, this too does not work because it has also been closed on the server
(again the SSL 3.0 Closure Alert and the TCP Closure packets for this second
port as processed on the Socket Receive for the port) and the retry count is
decremented again. At this point the retry count is now 0 and the error message
is generated that indicates that the page could not be displayed.
RESOLUTION
Service Pack Information
To resolve this problem, obtain the latest service pack for Microsoft Windows
2000. For additional information, click the following article number to view
the article in the Microsoft Knowledge Base:
260910 How to Obtain the Latest Windows 2000 Service Pack
Hotfix Information
A supported fix is now available from Microsoft, but it is only intended to
correct the problem described in this article. Only apply it to systems that
are experiencing this specific problem. This fix may receive additional testing
to further ensure product quality. Therefore, if you are not severely affected
by this problem, Microsoft recommends that you wait for the next Internet
Explorer 6.0 service pack that contains this fix.
To resolve this problem immediately, contact Microsoft Product Support Services
to obtain the fix. For a complete list of Microsoft Product Support Services
phone numbers and information about support costs, visit the following
Microsoft Web site:
http://support.microsoft.com/default.aspx?scid=fh;EN-US;CNTACTMS
Note In special cases, charges that are ordinarily incurred for support calls
may be canceled if a Microsoft Support Professional determines that a specific
update will resolve your problem. The usual support costs will apply to
additional support questions and issues that do not qualify for the specific
update in question. Important Install the February, 2003 Cumulative Patch for
Internet Explorer before you install this fix. For additional information about
this update, click the following article number to view the article in the
Microsoft Knowledge Base:
810847 February, 2003, Cumulative Patch for Internet Explorer
If you installed this fix before you installed the February, 2003 Cumulative
Patch for Internet Explorer, you must reinstall this fix.
Internet Explorer 5.01 on Windows 2000 Service Pack 3
The English version of this fix has the file attributes (or later) that are
listed in the following table. The dates and times for these files are listed
in coordinated universal time (UTC). When you view the file information, it is
converted to local time. To find the difference between UTC and local time, use
the Time Zone tab in the Date and Time tool in Control Panel.
Date Time Version Size File name
--------------------------------------------------------------
13-Jan-2003 10:03 5.0.3513.1300 461,072 Wininet.dll
Internet Explorer 5.5 Service Pack 2
The English version of this fix has the file attributes (or later) that are
listed in the following table. The dates and times for these files are listed
in coordinated universal time (UTC). When you view the file information, it is
converted to local time. To find the difference between UTC and local time, use
the Time Zone tab in the Date and Time tool in Control Panel.
Date Time Version Size File name
--------------------------------------------------------------
13-Jan-2003 10:34 5.50.4925.1300 482,064 Wininet.dll
Internet Explorer 6
The English version of this fix has the file attributes (or later) that are
listed in the following table. The dates and times for these files are listed
in coordinated universal time (UTC). When you view the file information, it is
converted to local time. To find the difference between UTC and local time,
use the Time Zone tab in the Date and Time tool in Control Panel.
Date Time Version Size File name
--------------------------------------------------------------
13-Jan-2003 10:05 6.0.2725.1300 583,680 Wininet.dll
Internet Explorer 6 Service Pack 1
The English version of this fix has the file attributes (or later) that are
listed in the following table. The dates and times for these files are listed
in coordinated universal time (UTC). When you view the file information, it is
converted to local time. To find the difference between UTC and local time,
use the Time Zone tab in the Date and Time tool in Control Panel.
Date Time Version Size File name
--------------------------------------------------------------
13-Jan-2003 09:34 6.0.2800.1157 585,728 Wininet.dll
WORKAROUND
To work around this problem, use either of the following methods:
* On the server, turn off SSL 3.0, and then turn on SSL 2.0 to prevent the
closure alerts from being sent.
* On the client, set the MaxConnectionsPerServer value to 1.
For additional information about how to configure this value, click the
following article number to view the article in the Microsoft Knowledge Base:
183110 INFO: WinInet Limits Connections Per Server
STATUS
Microsoft has confirmed that this is a problem in the Microsoft products that
are listed at the beginning of this article. This problem was first corrected
in Microsoft Windows 2000 Service Pack 4.
MORE INFORMATION
For additional information about the SSL 3.0 Closure Alert, view the
"SSL 3.0 Specification section 5.4.1". To do so, visit the following Netscape
Web site:
http://home.netscape.com/eng/ssl3/draft302.txt
Microsoft provides third-party contact information to help you find technical
support. This contact information may change without notice. Microsoft does not
guarantee the accuracy of this third-party contact information.
The information in this article applies to:
* Microsoft Internet Explorer version 6 for Windows XP SP1
* Microsoft Internet Explorer version 6 for Windows 2000 SP1
* Microsoft Internet Explorer version 6 for Windows NT 4.0 SP1
* Microsoft Internet Explorer version 6 for Windows Millennium Edition SP1
* Microsoft Internet Explorer version 6 for Windows 98 Second Edition SP1
* Microsoft Internet Explorer version 6 for Windows XP
* Microsoft Internet Explorer version 6 for Windows 2000
* Microsoft Internet Explorer version 6 for Windows NT 4.0
* Microsoft Internet Explorer version 6 for Windows 98 Second Edition
* Microsoft Internet Explorer version 6 for Windows Millennium Edition
* Microsoft Internet Explorer 5.5 for Windows 2000 SP 2
* Microsoft Internet Explorer 5.5 for Windows NT 4.0 SP 2
* Microsoft Internet Explorer 5.5 for Windows Millennium Edition SP 2
* Microsoft Internet Explorer 5.5 for Windows 98 Second Edition SP 2
* Microsoft Internet Explorer 5.01 for Windows 2000 SP 3
Last Reviewed: 11/4/2003 (10.0)
Keywords: kbWin2kSP4fix kbbug kbenv kberrmsg kbfix kbIE550preSP2fix KB305217HTTP/1.1 200 OK
Date: Thu, 02 Sep 2004 17:14:21 GMT
Server: Orion/2.0.3
Content-Length: 8925
Connection: Keep-Alive
Keep-Alive: timeout=15, max=100
Content-Type: application/octet-stream
Content-Disposition: attachment; filename="MSKB305217.txt";
Page Cannot Be Displayed Error During SSL 3.0 Server Session Timeout
View products that this article applies to.
This article was previously published under Q305217
SYMPTOMS
When Internet Explorer version 5.5 Service Pack 1 or later tries to POST data,
GET data or set up an HTTPS connection with the connect command, Internet
Explorer generates an error message that indicates that the page could not be
displayed. This problem does not occur in Internet Explorer 5.5.
CAUSE
This problem can occur when the Web server issues an SSL 3.0 closure alert as
the port is being closed on the server, because of a possible session timeout.
This closure alert is sent across as a Zero Byte Encrypted packet, however, the
complete closure message occurs by using 2 different packets. The closure alert
arrives with the TCP Flags ".AP..." (Ack Push) to instruct the program that the
SSL 3.0 session is closing and another packet with the TCP Flags
".A...F" (Ack Fin) to instruct the TCP layer to close the port on the client
computer.
Because the closure alert arrives and the RESET and FIN TCP flags are not set
within that packet, there is no way for Wininet.dll to determine that this is
not program data, and because of this, the Keep-Alive port is left open on the
client until the next Socket Receive call.
This causes the problem to occur because Internet Explorer has two Keep-Alive
ports open to the server and the Retry count is equal to 2. When the Socket
Receive occurs after the first attempt to send data, the SSL 3.0 closure alert
is processed and the TCP closure is processed causing the first Keep-Alive port
to be closed and the Retry count to be decremented. Because the retry count is
not 0, there is another POST attempt that uses the second Keep-Alive port.
However, this too does not work because it has also been closed on the server
(again the SSL 3.0 Closure Alert and the TCP Closure packets for this second
port as processed on the Socket Receive for the port) and the retry count is
decremented again. At this point the retry count is now 0 and the error message
is generated that indicates that the page could not be displayed.
RESOLUTION
Service Pack Information
To resolve this problem, obtain the latest service pack for Microsoft Windows
2000. For additional information, click the following article number to view
the article in the Microsoft Knowledge Base:
260910 How to Obtain the Latest Windows 2000 Service Pack
Hotfix Information
A supported fix is now available from Microsoft, but it is only intended to
correct the problem described in this article. Only apply it to systems that
are experiencing this specific problem. This fix may receive additional testing
to further ensure product quality. Therefore, if you are not severely affected
by this problem, Microsoft recommends that you wait for the next Internet
Explorer 6.0 service pack that contains this fix.
To resolve this problem immediately, contact Microsoft Product Support Services
to obtain the fix. For a complete list of Microsoft Product Support Services
phone numbers and information about support costs, visit the following
Microsoft Web site:
http://support.microsoft.com/default.aspx?scid=fh;EN-US;CNTACTMS
Note In special cases, charges that are ordinarily incurred for support calls
may be canceled if a Microsoft Support Professional determines that a specific
update will resolve your problem. The usual support costs will apply to
additional support questions and issues that do not qualify for the specific
update in question. Important Install the February, 2003 Cumulative Patch for
Internet Explorer before you install this fix. For additional information about
this update, click the following article number to view the article in the
Microsoft Knowledge Base:
810847 February, 2003, Cumulative Patch for Internet Explorer
If you installed this fix before you installed the February, 2003 Cumulative
Patch for Internet Explorer, you must reinstall this fix.
Internet Explorer 5.01 on Windows 2000 Service Pack 3
The English version of this fix has the file attributes (or later) that are
listed in the following table. The dates and times for these files are listed
in coordinated universal time (UTC). When you view the file information, it is
converted to local time. To find the difference between UTC and local time, use
the Time Zone tab in the Date and Time tool in Control Panel.
Date Time Version Size File name
--------------------------------------------------------------
13-Jan-2003 10:03 5.0.3513.1300 461,072 Wininet.dll
Internet Explorer 5.5 Service Pack 2
The English version of this fix has the file attributes (or later) that are
listed in the following table. The dates and times for these files are listed
in coordinated universal time (UTC). When you view the file information, it is
converted to local time. To find the difference between UTC and local time, use
the Time Zone tab in the Date and Time tool in Control Panel.
Date Time Version Size File name
--------------------------------------------------------------
13-Jan-2003 10:34 5.50.4925.1300 482,064 Wininet.dll
Internet Explorer 6
The English version of this fix has the file attributes (or later) that are
listed in the following table. The dates and times for these files are listed
in coordinated universal time (UTC). When you view the file information, it is
converted to local time. To find the difference between UTC and local time,
use the Time Zone tab in the Date and Time tool in Control Panel.
Date Time Version Size File name
--------------------------------------------------------------
13-Jan-2003 10:05 6.0.2725.1300 583,680 Wininet.dll
Internet Explorer 6 Service Pack 1
The English version of this fix has the file attributes (or later) that are
listed in the following table. The dates and times for these files are listed
in coordinated universal time (UTC). When you view the file information, it is
converted to local time. To find the difference between UTC and local time,
use the Time Zone tab in the Date and Time tool in Control Panel.
Date Time Version Size File name
--------------------------------------------------------------
13-Jan-2003 09:34 6.0.2800.1157 585,728 Wininet.dll
WORKAROUND
To work around this problem, use either of the following methods:
* On the server, turn off SSL 3.0, and then turn on SSL 2.0 to prevent the
closure alerts from being sent.
* On the client, set the MaxConnectionsPerServer value to 1.
For additional information about how to configure this value, click the
following article number to view the article in the Microsoft Knowledge Base:
183110 INFO: WinInet Limits Connections Per Server
STATUS
Microsoft has confirmed that this is a problem in the Microsoft products that
are listed at the beginning of this article. This problem was first corrected
in Microsoft Windows 2000 Service Pack 4.
MORE INFORMATION
For additional information about the SSL 3.0 Closure Alert, view the
"SSL 3.0 Specification section 5.4.1". To do so, visit the following Netscape
Web site:
http://home.netscape.com/eng/ssl3/draft302.txt
Microsoft provides third-party contact information to help you find technical
support. This contact information may change without notice. Microsoft does not
guarantee the accuracy of this third-party contact information.
The information in this article applies to:
* Microsoft Internet Explorer version 6 for Windows XP SP1
* Microsoft Internet Explorer version 6 for Windows 2000 SP1
* Microsoft Internet Explorer version 6 for Windows NT 4.0 SP1
* Microsoft Internet Explorer version 6 for Windows Millennium Edition SP1
* Microsoft Internet Explorer version 6 for Windows 98 Second Edition SP1
* Microsoft Internet Explorer version 6 for Windows XP
* Microsoft Internet Explorer version 6 for Windows 2000
* Microsoft Internet Explorer version 6 for Windows NT 4.0
* Microsoft Internet Explorer version 6 for Windows 98 Second Edition
* Microsoft Internet Explorer version 6 for Windows Millennium Edition
* Microsoft Internet Explorer 5.5 for Windows 2000 SP 2
* Microsoft Internet Explorer 5.5 for Windows NT 4.0 SP 2
* Microsoft Internet Explorer 5.5 for Windows Millennium Edition SP 2
* Microsoft Internet Explorer 5.5 for Windows 98 Second Edition SP 2
* Microsoft Internet Explorer 5.01 for Windows 2000 SP 3
Last Reviewed: 11/4/2003 (10.0)
Keywords: kbWin2kSP4fix kbbug kbenv kberrmsg kbfix kbIE550preSP2fix KB305217