Can't connect to Web

This morning I suddenly lost my connection to the web while I was
browsing.

Mail still worked, news still worked, but the web connection did not.

I reset the router, rebooted my computer, but still nothing.

I wondered if it was a browser fault (I use Firefox) so tried Internet
Explorer. It too could not connect, but offered to run diagnostics.
This is what was found:

---- diagnostic report ----
Last diagnostic run time: 05/26/17 09:44:37 HTTP, HTTPS, FTP
Diagnostic
HTTP, HTTPS, FTP connectivity

info HTTP: Successfully connected to www.microsoft.com.
warn HTTPS: Error 12157 connecting to www.microsoft.com: An error
occurred in the secure channel support
warn FTP (Passive): Error 12031 connecting to ftp.microsoft.com: The
connection with the server was reset
warn HTTPS: Error 12029 connecting to www.passport.net: A connection
with the server could not be established
warn FTP (Active): Error 12031 connecting to ftp.microsoft.com: The
connection with the server was reset
error Could not make an HTTPS connection.
error Could not make an FTP connection.
info Redirecting user to support call



DNS Client Diagnostic
DNS - Not a home user scenario

info Using Web Proxy: no
info Resolving name ok for (www.microsoft.com): yes
No DNS servers

DNS failure




Gateway Diagnostic
Gateway

info The following proxy configuration is being used by IE:
Automatically Detect Settingsisabled Automatic Configuration Script:
Proxy Server: Proxy Bypass list:
info This computer has the following default gateway entry(ies):
192.168.0.1
info This computer has the following IP address(es): 192.168.0.2
info The default gateway is in the same subnet as this computer
info The default gateway entry is a valid unicast address
info The default gateway address was resolved via ARP in 1 try(ies)
info The default gateway was reached via ICMP Ping in 1 try(ies)
info TCP port 80 on host 104.92.152.182 was successfully reached
info The Internet host www.microsoft.com was successfully reached
info The default gateway is OK



IP Layer Diagnostic
Corrupted IP routing table

info The default route is valid
info The loopback route is valid
info The local host route is valid
info The local subnet route is valid
Invalid ARP cache entries

action The ARP cache has been flushed



IP Configuration Diagnostic
Invalid IP address

info Valid IP address detected: 192.168.0.2



Wireless Diagnostic
Wireless - Service disabled

Wireless - User SSID

Wireless - First time setup

Wireless - Radio off

Wireless - Out of range

Wireless - Hardware issue

Wireless - Novice user

Wireless - Ad-hoc network

Wireless - Less preferred

Wireless - 802.1x enabled

Wireless - Configuration mismatch

Wireless - Low SNR




WinSock Diagnostic
WinSock status

info IrDA protocol is not found in Winsock catalog.
info All base service provider entries are present in the Winsock
catalog.
info The Winsock Service provider chains are valid.
info Provider entry MSAFD Tcpip [TCP/IP] passed the loopback
communication test.
info Provider entry MSAFD Tcpip [UDP/IP] passed the loopback
communication test.
info Provider entry RSVP UDP Service Provider passed the loopback
communication test.
info Provider entry RSVP TCP Service Provider passed the loopback
communication test.
info Connectivity is valid for all Winsock service providers.



Network Adapter Diagnostic
Network location detection

info Using home Internet connection
Network adapter identification

info Network connection: Name=Local Area Connection 2, Device=Realtek
PCIe FE Family Controller, MediaType=LAN, SubMediaType=LAN
info Network connection: Name=MSN, Device=, MediaType=PHONE,
SubMediaType=NONE
info Network connection: Name=telkomsa9, Device=WAN Miniport (PPPOE),
MediaType=PPPOE, SubMediaType=NONE
info Ethernet connection selected
Network adapter status

info Network connection status: Connected



HTTP, HTTPS, FTP Diagnostic
HTTP, HTTPS, FTP connectivity

warn FTP (Passive): Error 12031 connecting to ftp.microsoft.com: The
connection with the server was reset
info HTTP: Successfully connected to www.microsoft.com.
warn HTTPS: Error 12157 connecting to www.microsoft.com: An error
occurred in the secure channel support
warn HTTPS: Error 12029 connecting to www.passport.net: A connection
with the server could not be established
warn FTP (Active): Error 12031 connecting to ftp.microsoft.com: The
connection with the server was reset
error Could not make an HTTPS connection.
error Could not make an FTP connection.

--- end diagnostic report ---


Can any of you network gurus suggest what can be done to fix it?


--
Steve Hayes
http://www.khanya.org.za/stevesig.htm
http://khanya.wordpress.com

Steve Hayes wrote on 5/26/2017 4:04 AM:
This morning I suddenly lost my connection to the web while I was
browsing.

Mail still worked, news still worked, but the web connection did not.

I reset the router, rebooted my computer, but still nothing.

I wondered if it was a browser fault (I use Firefox) so tried Internet
Explorer. It too could not connect, but offered to run diagnostics.
This is what was found:

---- diagnostic report ----
Last diagnostic run time: 05/26/17 09:44:37 HTTP, HTTPS, FTP
Diagnostic
HTTP, HTTPS, FTP connectivity

info HTTP: Successfully connected to www.microsoft.com.
warn HTTPS: Error 12157 connecting to www.microsoft.com: An error
occurred in the secure channel support
warn FTP (Passive): Error 12031 connecting to ftp.microsoft.com: The
connection with the server was reset
warn HTTPS: Error 12029 connecting to www.passport.net: A connection
with the server could not be established
warn FTP (Active): Error 12031 connecting to ftp.microsoft.com: The
connection with the server was reset
error Could not make an HTTPS connection.
error Could not make an FTP connection.
info Redirecting user to support call



DNS Client Diagnostic
DNS - Not a home user scenario

info Using Web Proxy: no
info Resolving name ok for (www.microsoft.com): yes
No DNS servers

DNS failure




Gateway Diagnostic
Gateway

info The following proxy configuration is being used by IE:
Automatically Detect Settingsisabled Automatic Configuration Script:
Proxy Server: Proxy Bypass list:
info This computer has the following default gateway entry(ies):
192.168.0.1
info This computer has the following IP address(es): 192.168.0.2
info The default gateway is in the same subnet as this computer
info The default gateway entry is a valid unicast address
info The default gateway address was resolved via ARP in 1 try(ies)
info The default gateway was reached via ICMP Ping in 1 try(ies)
info TCP port 80 on host 104.92.152.182 was successfully reached
info The Internet host www.microsoft.com was successfully reached
info The default gateway is OK



IP Layer Diagnostic
Corrupted IP routing table

info The default route is valid
info The loopback route is valid
info The local host route is valid
info The local subnet route is valid
Invalid ARP cache entries

action The ARP cache has been flushed



IP Configuration Diagnostic
Invalid IP address

info Valid IP address detected: 192.168.0.2



Wireless Diagnostic
Wireless - Service disabled

Wireless - User SSID

Wireless - First time setup

Wireless - Radio off

Wireless - Out of range

Wireless - Hardware issue

Wireless - Novice user

Wireless - Ad-hoc network

Wireless - Less preferred

Wireless - 802.1x enabled

Wireless - Configuration mismatch

Wireless - Low SNR




WinSock Diagnostic
WinSock status

info IrDA protocol is not found in Winsock catalog.
info All base service provider entries are present in the Winsock
catalog.
info The Winsock Service provider chains are valid.
info Provider entry MSAFD Tcpip [TCP/IP] passed the loopback
communication test.
info Provider entry MSAFD Tcpip [UDP/IP] passed the loopback
communication test.
info Provider entry RSVP UDP Service Provider passed the loopback
communication test.
info Provider entry RSVP TCP Service Provider passed the loopback
communication test.
info Connectivity is valid for all Winsock service providers.



Network Adapter Diagnostic
Network location detection

info Using home Internet connection
Network adapter identification

info Network connection: Name=Local Area Connection 2, Device=Realtek
PCIe FE Family Controller, MediaType=LAN, SubMediaType=LAN
info Network connection: Name=MSN, Device=, MediaType=PHONE,
SubMediaType=NONE
info Network connection: Name=telkomsa9, Device=WAN Miniport (PPPOE),
MediaType=PPPOE, SubMediaType=NONE
info Ethernet connection selected
Network adapter status

info Network connection status: Connected



HTTP, HTTPS, FTP Diagnostic
HTTP, HTTPS, FTP connectivity

warn FTP (Passive): Error 12031 connecting to ftp.microsoft.com: The
connection with the server was reset
info HTTP: Successfully connected to www.microsoft.com.
warn HTTPS: Error 12157 connecting to www.microsoft.com: An error
occurred in the secure channel support
warn HTTPS: Error 12029 connecting to www.passport.net: A connection
with the server could not be established
warn FTP (Active): Error 12031 connecting to ftp.microsoft.com: The
connection with the server was reset
error Could not make an HTTPS connection.
error Could not make an FTP connection.

--- end diagnostic report ---


Can any of you network gurus suggest what can be done to fix it?

I've had this problem myself, but I can't remember what I had to do to
fix it. I think I had to reset the network stack. Seems it gets in a
funky state and rebooting the machine doesn't fix it unless you execute
some commands first.

Here is the batch file I use to deal with this if I remember correctly.
Someone gave it to me so it has some stuff commented out that isn't
needed. Also, one comment talks about reinstalling browsers, I've never
had to do that. Resetting the machine is required. This file needs to
be run in a command window with administrative privileges.



:: This problem usually has to do with TCP/IP or Winsock requiring a reset.
:: Winsock entries tells Windows 7 how to access your network services.
:: Additionally, your TCP/IP protocol can be corrupted.
:: The TCP/IP protocol is a stack of 4 layers that includes several
:: transport layers, but when this stack is corrupt you will constantly
:: have connectivity issues.

:: You need Admin access to enter the codes below. Windows button + x,
:: then choose Command Prompt (Admin)

:: reset winsock entries
netsh winsock reset catalog

:: reset TCP/IP stack
netsh int ip reset c:\reset.log

:: You may have to reinstall Chrome and Firefox or reboot to have
:: the chnage take place.
:: netsh int ip uninstall
:: netsh int ip install
::
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\Nsi\{eb004a00-9b1a-11d4-9123-0050047759bc}
26

--

Rick C

On Fri, 26 May 2017 04:47:44 -0400, rickman wrote:

Steve Hayes wrote on 5/26/2017 4:04 AM:
This morning I suddenly lost my connection to the web while I was
browsing.

Mail still worked, news still worked, but the web connection did not.

I reset the router, rebooted my computer, but still nothing.
I've had this problem myself, but I can't remember what I had to do to
fix it. I think I had to reset the network stack. Seems it gets in a
funky state and rebooting the machine doesn't fix it unless you execute
some commands first.

Here is the batch file I use to deal with this if I remember correctly.
Someone gave it to me so it has some stuff commented out that isn't
needed. Also, one comment talks about reinstalling browsers, I've never
had to do that. Resetting the machine is required. This file needs to
be run in a command window with administrative privileges.

Thanks very much.

:: This problem usually has to do with TCP/IP or Winsock requiring a reset.
:: Winsock entries tells Windows 7 how to access your network services.
:: Additionally, your TCP/IP protocol can be corrupted.
:: The TCP/IP protocol is a stack of 4 layers that includes several
:: transport layers, but when this stack is corrupt you will constantly
:: have connectivity issues.

:: You need Admin access to enter the codes below. Windows button + x,
:: then choose Command Prompt (Admin)

:: reset winsock entries
netsh winsock reset catalog

:: reset TCP/IP stack
netsh int ip reset c:\reset.log

:: You may have to reinstall Chrome and Firefox or reboot to have
:: the chnage take place.
:: netsh int ip uninstall
:: netsh int ip install
::
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contr ol\Nsi\{eb004a00-9b1a-11d4-9123-0050047759bc}
26

Are the double colons a necessary part of the command?


--
Steve Hayes
http://www.khanya.org.za/stevesig.htm
http://khanya.wordpress.com

Steve Hayes wrote:

Are the double colons a necessary part of the command?

Comment lines in a batch file can either begin with "rem " (that's "rem"
followed by a space or tab character) or with "::".

Steve Hayes wrote on 5/28/2017 12:21 AM:
On Fri, 26 May 2017 04:47:44 -0400, rickman wrote:

Steve Hayes wrote on 5/26/2017 4:04 AM:
This morning I suddenly lost my connection to the web while I was
browsing.

Mail still worked, news still worked, but the web connection did not.

I reset the router, rebooted my computer, but still nothing.
I've had this problem myself, but I can't remember what I had to do to
fix it. I think I had to reset the network stack. Seems it gets in a
funky state and rebooting the machine doesn't fix it unless you execute
some commands first.

Here is the batch file I use to deal with this if I remember correctly.
Someone gave it to me so it has some stuff commented out that isn't
needed. Also, one comment talks about reinstalling browsers, I've never
had to do that. Resetting the machine is required. This file needs to
be run in a command window with administrative privileges.

Thanks very much.

:: This problem usually has to do with TCP/IP or Winsock requiring a reset.
:: Winsock entries tells Windows 7 how to access your network services.
:: Additionally, your TCP/IP protocol can be corrupted.
:: The TCP/IP protocol is a stack of 4 layers that includes several
:: transport layers, but when this stack is corrupt you will constantly
:: have connectivity issues.

:: You need Admin access to enter the codes below. Windows button + x,
:: then choose Command Prompt (Admin)

:: reset winsock entries
netsh winsock reset catalog

:: reset TCP/IP stack
netsh int ip reset c:\reset.log

:: You may have to reinstall Chrome and Firefox or reboot to have
:: the chnage take place.
:: netsh int ip uninstall
:: netsh int ip install
::
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\Nsi\{eb004a00-9b1a-11d4-9123-0050047759bc}
26

Are the double colons a necessary part of the command?

I believe the double colons are comment markers. I just used the file
verbatim. There's really only two commands. Unfortunately you have to
reboot the computer to get it to work. Let us know if this helps.

--

Rick C

rickman wrote:
Steve Hayes wrote on 5/28/2017 12:21 AM:
On Fri, 26 May 2017 04:47:44 -0400, rickman wrote:

Steve Hayes wrote on 5/26/2017 4:04 AM:
This morning I suddenly lost my connection to the web while I was
browsing.

Mail still worked, news still worked, but the web connection did not.

I reset the router, rebooted my computer, but still nothing.
I've had this problem myself, but I can't remember what I had to do to
fix it. I think I had to reset the network stack. Seems it gets in a
funky state and rebooting the machine doesn't fix it unless you execute
some commands first.

Here is the batch file I use to deal with this if I remember correctly.
Someone gave it to me so it has some stuff commented out that isn't
needed. Also, one comment talks about reinstalling browsers, I've never
had to do that. Resetting the machine is required. This file needs to
be run in a command window with administrative privileges.

Thanks very much.

:: This problem usually has to do with TCP/IP or Winsock requiring a
reset.
:: Winsock entries tells Windows 7 how to access your network services.
:: Additionally, your TCP/IP protocol can be corrupted.
:: The TCP/IP protocol is a stack of 4 layers that includes several
:: transport layers, but when this stack is corrupt you will constantly
:: have connectivity issues.

:: You need Admin access to enter the codes below. Windows button + x,
:: then choose Command Prompt (Admin)

:: reset winsock entries
netsh winsock reset catalog

:: reset TCP/IP stack
netsh int ip reset c:\reset.log

:: You may have to reinstall Chrome and Firefox or reboot to have
:: the chnage take place.
:: netsh int ip uninstall
:: netsh int ip install
::
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\Nsi\{eb004a00-9b1a-11d4-9123-0050047759bc}

26

Are the double colons a necessary part of the command?

I believe the double colons are comment markers. I just used the file
verbatim. There's really only two commands. Unfortunately you have to
reboot the computer to get it to work. Let us know if this helps.


No one seems to have made any comments about the registry key at the end.
Am I missing a post ?

There is a picture here, of someone modifying the permissions
on the "26" entry for Full Control, instead of it being just Read.

https://www.eightforums.com/network-...p-stack-2.html

On later OSes, those two netsh commands are part of the
network troubleshooter.

And I hadn't heard of the 26 thing before. I wonder how
it gets set to just "Read" ?

HTH,
Paul

Paul wrote on 5/28/2017 2:17 AM:
rickman wrote:
Steve Hayes wrote on 5/28/2017 12:21 AM:
On Fri, 26 May 2017 04:47:44 -0400, rickman wrote:

Steve Hayes wrote on 5/26/2017 4:04 AM:
This morning I suddenly lost my connection to the web while I was
browsing.

Mail still worked, news still worked, but the web connection did not.

I reset the router, rebooted my computer, but still nothing.
I've had this problem myself, but I can't remember what I had to do to
fix it. I think I had to reset the network stack. Seems it gets in a
funky state and rebooting the machine doesn't fix it unless you execute
some commands first.

Here is the batch file I use to deal with this if I remember correctly.
Someone gave it to me so it has some stuff commented out that isn't
needed. Also, one comment talks about reinstalling browsers, I've never
had to do that. Resetting the machine is required. This file needs to
be run in a command window with administrative privileges.

Thanks very much.

:: This problem usually has to do with TCP/IP or Winsock requiring a reset.
:: Winsock entries tells Windows 7 how to access your network services.
:: Additionally, your TCP/IP protocol can be corrupted.
:: The TCP/IP protocol is a stack of 4 layers that includes several
:: transport layers, but when this stack is corrupt you will constantly
:: have connectivity issues.

:: You need Admin access to enter the codes below. Windows button + x,
:: then choose Command Prompt (Admin)

:: reset winsock entries
netsh winsock reset catalog

:: reset TCP/IP stack
netsh int ip reset c:\reset.log

:: You may have to reinstall Chrome and Firefox or reboot to have
:: the chnage take place.
:: netsh int ip uninstall
:: netsh int ip install
::
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\Nsi\{eb004a00-9b1a-11d4-9123-0050047759bc}

26

Are the double colons a necessary part of the command?

I believe the double colons are comment markers. I just used the file
verbatim. There's really only two commands. Unfortunately you have to
reboot the computer to get it to work. Let us know if this helps.


No one seems to have made any comments about the registry key at the end.
Am I missing a post ?

Maybe the one where I posted the file? The registry key is just a comment.
In later posts it is broken onto a new line by the 72 character limitation.


There is a picture here, of someone modifying the permissions
on the "26" entry for Full Control, instead of it being just Read.

https://www.eightforums.com/network-...p-stack-2.html


On later OSes, those two netsh commands are part of the
network troubleshooter.

And I hadn't heard of the 26 thing before. I wonder how
it gets set to just "Read" ?

That rings a bell... I didn't remember that.

--

Rick C

Steve Hayes wrote:

This morning I suddenly lost my connection to the web while I was
browsing.

Mail still worked, news still worked, but the web connection did not.

I reset the router, rebooted my computer, but still nothing.

I wondered if it was a browser fault (I use Firefox) so tried Internet
Explorer. It too could not connect, but offered to run diagnostics.
This is what was found:

---- diagnostic report ----
Last diagnostic run time: 05/26/17 09:44:37 HTTP, HTTPS, FTP
Diagnostic
HTTP, HTTPS, FTP connectivity

info HTTP: Successfully connected to www.microsoft.com.
warn HTTPS: Error 12157 connecting to www.microsoft.com: An error
occurred in the secure channel support
warn FTP (Passive): Error 12031 connecting to ftp.microsoft.com: The
connection with the server was reset
warn HTTPS: Error 12029 connecting to www.passport.net: A connection
with the server could not be established
warn FTP (Active): Error 12031 connecting to ftp.microsoft.com: The
connection with the server was reset
error Could not make an HTTPS connection.
error Could not make an FTP connection.
info Redirecting user to support call


DNS Client Diagnostic
DNS - Not a home user scenario

info Using Web Proxy: no
info Resolving name ok for (www.microsoft.com): yes
No DNS servers

DNS failure



Gateway Diagnostic
Gateway

info The following proxy configuration is being used by IE:
Automatically Detect Settingsisabled Automatic Configuration Script:
Proxy Server: Proxy Bypass list:
info This computer has the following default gateway entry(ies):
192.168.0.1
info This computer has the following IP address(es): 192.168.0.2
info The default gateway is in the same subnet as this computer
info The default gateway entry is a valid unicast address
info The default gateway address was resolved via ARP in 1 try(ies)
info The default gateway was reached via ICMP Ping in 1 try(ies)
info TCP port 80 on host 104.92.152.182 was successfully reached
info The Internet host www.microsoft.com was successfully reached
info The default gateway is OK


IP Layer Diagnostic
Corrupted IP routing table

info The default route is valid
info The loopback route is valid
info The local host route is valid
info The local subnet route is valid
Invalid ARP cache entries

action The ARP cache has been flushed


IP Configuration Diagnostic
Invalid IP address

info Valid IP address detected: 192.168.0.2


Wireless Diagnostic
Wireless - Service disabled

Wireless - User SSID

Wireless - First time setup

Wireless - Radio off

Wireless - Out of range

Wireless - Hardware issue

Wireless - Novice user

Wireless - Ad-hoc network

Wireless - Less preferred

Wireless - 802.1x enabled

Wireless - Configuration mismatch

Wireless - Low SNR



WinSock Diagnostic
WinSock status

info IrDA protocol is not found in Winsock catalog.
info All base service provider entries are present in the Winsock
catalog.
info The Winsock Service provider chains are valid.
info Provider entry MSAFD Tcpip [TCP/IP] passed the loopback
communication test.
info Provider entry MSAFD Tcpip [UDP/IP] passed the loopback
communication test.
info Provider entry RSVP UDP Service Provider passed the loopback
communication test.
info Provider entry RSVP TCP Service Provider passed the loopback
communication test.
info Connectivity is valid for all Winsock service providers.


Network Adapter Diagnostic
Network location detection

info Using home Internet connection
Network adapter identification

info Network connection: Name=Local Area Connection 2, Device=Realtek
PCIe FE Family Controller, MediaType=LAN, SubMediaType=LAN
info Network connection: Name=MSN, Device=, MediaType=PHONE,
SubMediaType=NONE
info Network connection: Name=telkomsa9, Device=WAN Miniport (PPPOE),
MediaType=PPPOE, SubMediaType=NONE
info Ethernet connection selected
Network adapter status

info Network connection status: Connected


HTTP, HTTPS, FTP Diagnostic
HTTP, HTTPS, FTP connectivity

warn FTP (Passive): Error 12031 connecting to ftp.microsoft.com: The
connection with the server was reset
info HTTP: Successfully connected to www.microsoft.com.
warn HTTPS: Error 12157 connecting to www.microsoft.com: An error
occurred in the secure channel support
warn HTTPS: Error 12029 connecting to www.passport.net: A connection
with the server could not be established
warn FTP (Active): Error 12031 connecting to ftp.microsoft.com: The
connection with the server was reset
error Could not make an HTTPS connection.
error Could not make an FTP connection.

--- end diagnostic report ---

Can any of you network gurus suggest what can be done to fix it?

Microsoft dropped their FTP server and why you cannot connect to it.
That happened long after Windows XP was released and when its
troubleshooter was coded. There seems to be a listener on port 21 on
their host but their FTP server program won't respond.

You can connect via HTTP but not HTTPS. When you use a web browser to
connect to https://www.microsoft.com/, it should report an error but it
should also let you look at the details, like clicking on an icon in the
address bar to get more info. That will tell you more. In IE, and when
going to this HTTPS site, there should be a padlock icon in its address
bar. Click on it.

Do you use something that interrogates your HTTPS traffic? I use Avast
Free and it has its HTTPS scanner. It uses a MITM (man-in-the-middle)
scheme to intercept web traffic: it pretends to your client that it is
the other endpoint (server) and it pretends to the server that it is
your endpoint (client). That works by installing a root certificate
into your certificate store. Windows has its own certificate store that
is used by all web browsers EXCEPT Firefox which has its own private
certificate store and into where Avast must install its root store. If
HTTPS scanning is enabled in Avast but its root cert is missing,
expired, or revoked in whichever cert store your web browser uses then
the cert authentication will fail to its proxy trying to use that cert
for the MITM scheme.

If using Avast (or anything else that interrogates your HTTPS traffic),
is it configured to scan your HTTPS traffic? If you use Firefox, is the
avast cert listed in its private cert store (Options - Advanced -
Certificates - View Certificates)? In Windows' cert store
(certmgr.msc), is the "avast email/web shield" cert listed under Trusted
Root Certificates?

It can also depend on which web browser you use. Google made a change
in version 53 of Chrome that requires the SA (Subject Alternate) field
in a cert be populated. In the past, it was sufficient for a single
domain to just populate the Subject field with the domain name. Still
works okay in Firefox which does not demand the SA field be populated
but Google decided to be assholes. If only one domain is specified, the
Subject field has it and there has never been a requirement the SA field
also be populated. The SA field is only to be used when more than one
host or domain is listed for a cert. That lets sites use one cert for
multiple targets rather than buy a cert for each one.

I have another program (Applian Replay Media Capture aka RMC) that
intercepts HTTPS traffic to capture video streams. It uses the MITM
scheme to grab the HTTPS stream. Since it specifies only one domain,
only the Subject field in the cert is populated. The SA field is empty
(as it should be). I can use Firefox to visit a site and have RMC
capture a video stream. Google Chrome will refuse to allow HTTPS
connects when RMC is loaded (and using its cert for its proxy) because
they require the SA field be populated but which is NOT required when
just one domain is specified in the Subject field. The RMC cert is
self-signed as are all root certs. Google is okay with the other root
certs so I don't know why they don't like RMC's cert. That Google
doesn't like RMC's root cert is why I cannot do anything HTTPS in Chrome
when RMC's proxy is intercepting HTTPS traffic. I have to use Firefox
(in which RMC added its cert to Firefox's private cert store) to use RMC
with HTTPS sites.

So check what you have running. In one case, it could be HTTPS scanning
in some security program. In another case, it could be some software
you use that intercepts HTTPS traffic. For either case, you must have
the program's cert installed in whichever cert store that your program
uses. If I disable HTTPS support in RMC, I cannot capture video streams
from HTTPS sites because I cannot get their proxy to connect to HTTPS
sites. With Avast, I could disable its HTTPS scanning feature but that
means it can no longer inspect the content of a delivered web page to
determine if anything untoward is in there.

On 26/05/2017 09:04, Steve Hayes wrote:

Can any of you network gurus suggest what can be done to fix it?


Move your residence to where there is a good network connection!! South
Africa is not known to have a good internet service.

--
With over 500 million devices now running Windows 10, customer
satisfaction is higher than any previous version of windows.

"Steve Hayes" wrote in message
...

This morning I suddenly lost my connection to the web while I was
browsing.



Me Too

So I Open
Control Panel

Click On
Windows Updates

And Stop Auto Updates

Restart Pc


It Work For Me Today

On 26/5/2017 01:04, Steve Hayes wrote:

This morning I suddenly lost my connection to the web while I was
browsing.

Mail still worked, news still worked, but the web connection did not.

I reset the router, rebooted my computer, but still nothing.

I wondered if it was a browser fault (I use Firefox) so tried Internet
Explorer. It too could not connect, but offered to run diagnostics.
This is what was found:

---- diagnostic report ----
[snip]


DNS Client Diagnostic
DNS - Not a home user scenario

info Using Web Proxy: no
info Resolving name ok for (www.microsoft.com): yes
No DNS servers

DNS failure

I haven't read the entire thread, but this is mostly likely your
problem.

Your default Domain Name Server is down or can't be accessed. When you
can't access "The Web" with your browser, but mail, ftp, etc work
(they don't use DNS), that's where I'd start the troubleshooting.
Here's a couple articles

https://www.lifewire.com/find-the-ip...eb-site-818155
https://www.lifewire.com/what-is-the...-google-818153

Google's web site is hardly ever down. It's a good place to test if
your DNS is down using its IP addresses. You may get some kind of
error notice, but as long the number IP address you entered is replaced
with a URL with "google" in it, it's working even if typing in
www.google.com doesn't.

pinging both the domain name of a site and its IP address will test the
DNS, too.

Check your DNS entries in your configs both through the Windows
interface and directly with your router. Windows has a nastly habit of
corrupting configs.


Stef

In news
but mail, ftp, etc work (they don't use DNS),

Unless the IP addresses for the servers are hard-coded into the client,
they certanly do.

--
St. Paul, MN

On 28/5/2017 10:48, Bert wrote:

In news
but mail, ftp, etc work (they don't use DNS),

Unless the IP addresses for the servers are hard-coded into the client,
they certanly do.

I enter IP addresses sometimes. Just enter and save them. But even
when I enter the server "name," I think my email and ftp clients lookup
the IP address on first access and store them for future use, so it
doesn't have to look it up each time. The reason I say this is even
when my DNSes are "down" those clients (and usenet clent, too) still
work. I don't use a web browser for those tasks.

Stef

In news
But even when I enter the server "name," I think my email and ftp
clients lookup the IP address on first access and store them for
future use, so it doesn't have to look it up each time

If they do, it's a bad idea.

Many large-scale systems (and some small ones) have multiple IP
addresses and rotate the way they appear to DNS requests in order to
balance user load.

They'll also take addresses out of rotation if systems are down.

--
St. Paul, MN

On 31/5/2017 10:51, Bert wrote:

In news
But even when I enter the server "name," I think my email and ftp
clients lookup the IP address on first access and store them for
future use, so it doesn't have to look it up each time

If they do, it's a bad idea.

Many large-scale systems (and some small ones) have multiple IP
addresses and rotate the way they appear to DNS requests in order to
balance user load.

They'll also take addresses out of rotation if systems are down.

I really don't know for sure. I never bother checking. But I do know,
the few times the Web didn't work and I knew DNS, or lack thereof, was
the problem, I could still get mail, etc.

I think the OP is having a configuration problem more than anything
else. I used to have a side business troubleshooting such things on
Windows machines. Windows has an extraordinary ability to break
itself. When the printer or ethernet or wireless, etc. just stop
working, particularly when they worked fine before the machine was
"turned off" the night before, settings were the first thing I
checked.

Stef