Certificate error in Internet Explorer 8 in windows XP

Question

The project my teammates and I are working on is having security issues with internet explorer 8 running on windows xp.

Our app is hosted in a dedicated instance of Azure Websites, and has a EV certificate issued by GeoTrust. The certificate works correctly on all browsers, except Internet Explorer 8 running on windows xp. We get the following warning:

The security certificate presented by this website was issued for a different website's address.

When I go to View certificates I only see the certificate issue to *.azurewebsites.net by MSIT Machine Auth CS 2.

We found more information about this issue on a previous question: IE8 SSL Cert Problems while other browsers work like a charm

And the solution is to remove the SNI configuration on IIS, but we can’t do that on azure websites. What can we do?

Answer 1

Most likely, you're sharing an external IP address (non dedicated azure websites?) and it's not working since since IE8 on Windows XP does not support Server Name Indication.

Getting a dedicated instance should solve your problem, although I've not tested whether a dedicated azure web site gets its unique IP or not so you may want to try it yourself.

Update: It would seem that you can indeed choose not to use SNI when uploading the certificate to a standard mode azure web site.