Question : https not working for one site

Help!  

I have a handful of servers that cannot access one site via HTTPS.  All the servers are in the same network at the same location.  Other servers on the network can access that site fine via http or https.

DNS is working, the http site comes up fine.

I have cleared the SSL cache, made sure ssl 3.0 and TSL1.0 were enabled.

I have cleared all the local files and cookies and cache multiple times.

I have disabled the virus scan software.

I have checked to make sure there are no local firewalls or rras service.

The systems are all Windows Server 2003, running IE8.  

I have reproduced the issue outside of IE using WFETCH:

     [slib]: 0 bytes received from socket
     Failed to negotiate secure connection with www.ups.com - port 443

Other SSL sites work fine (tested using Microsoft and godaddy.

The problem just started yesterday afternoon, I don't let updates install automatically.

Is there a setting somewhere that I am missing, or maybe a client certificate that could be corrupted?

These are all VM's made from the same image, so that might be a key.

Thanks for your help!

Answer : https not working for one site

Well, Microsoft Tech support was able to help me.  :)  

Basically, we had disabled the RC2 and RC4 ciphers to pass a PCI Compliance audit.

Something must have changed yesterday at UPS where they no longer accepted DES or DES3 ciphers on the server that our systems kept hitting.

The solution was to re-enable the RC4 128/128 cipher and restart Internet Explorer.  That allowed me to get to the UPS.com site via https.

Once I verified that, I had to reset the IIS worker process for my websites and they were able to successfully calculate shipping charges again.

Just as a note - Fiirefox must handle SSL differently, the system settings didn't seem to affect it's access of the website, while IIS, WFETCH and Internet Explorer all were working under those system-wide registry settings.

Thanks for the suggestions!