title: Internet Explorer HTTPS request aborted?
body: <p>I installed a new signed certificate (SHA256 instead of SHA1) on my tomcat server. I initialized a new keystore like the old one. But after this I am unable to connect to my site via the Internet Explorer. (It's a intranet site and compatible modus for intranet sites is unchecked) The IE aborted the site request after ~200ms and show no error output/debug messages in the developer console.</p>
  
  <p>All root and intermediate certificate in the chain are installed in the "windows certificate store". </p>
  
  <p>In Chrome/Firefox all is fine and the certificate chain is valid.</p>
  
  <p>Here is my tomcat config, but it is unchanged (I know it is not the best way to use the a keystore with default password).
  server.xml:</p>
  
  <pre><code>...
  &lt;Connector port="8443" protocol="HTTP/1.1" SSLEnabled="true"
             URIEncoding="UTF-8"
             maxThreads="150" scheme="https" secure="true"
             clientAuth="false" sslProtocol="TLS" /&gt;
  ...
  </code></pre>
  
  <p>PS: If I go back to the old keystore all works "fine", IE shows the "Certificate revoked" Output.</p>
  
  <p><strong>Edit1:</strong> I found a related entry in the system log</p>
  
  <pre><code>Protocolname: System
  Source: Schannel
  Entry-ID: 36887
  It has received a serious warning: 80.
  </code></pre>
  
  <p><strong>Edit2:</strong> Time server was not correct configured, but problem is still persistent.</p>
  
  <p><strong>Edit3:</strong> 
      System Information</p>
  
  <pre><code>Java: 1.6.0
  Tomcat: 6.0.41.0
  OS: SLES 11 SP 3
  </code></pre>
  
  <p><strong>Edit4:</strong>
  I used the tool <a href="https://software.opensuse.org/package/sslscan" rel="nofollow">sslscan</a> to check the webserver, i guess the problem is a matching chipersuite</p>
  
  <pre><code>Prefered Server Cipher(s):
      TLSv1  128 bits  DHE-RSA-AES128-SHA
  </code></pre>