IIS Server Security - Multiple Site

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server Security > March 2004 > Multiple Site





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author Multiple Site
Brian

2004-03-24, 5:24 pm

My administrator installed a certificate for SSL on the
default site, but now there we have a second site using
port 81. I can't access it using https. Can SSL only use
the default site?
Jonathan Maltz [MS-MVP]

2004-03-24, 7:37 pm

Hi,

No, but it is limited to one site per IP address

--
--Jonathan Maltz [Microsoft MVP - Windows Server, Virtual PC]
http://www.visualwin.com - A Windows Server 2003 visual, step-by-step
tutorial site :-)
http://vpc.visualwin.com - Does <insert OS name> work on VPC 2004? Find out
here
Only reply by newsgroup. I do not do technical support via email. Any
emails I have not authorized are deleted before I see them.


"Brian" <anonymous@discussions.microsoft.com> wrote in message
news:1016501c411e8$884cb5b0$a601280a@phx
.gbl...
> My administrator installed a certificate for SSL on the
> default site, but now there we have a second site using
> port 81. I can't access it using https. Can SSL only use
> the default site?



Jerry Pisk

2004-03-25, 1:34 am

Not exactly, you can only have one SSL certificate per IP/port combination,
not just per IP address.

Jerry

"Jonathan Maltz [MS-MVP]" <jmaltz@mvps.org> wrote in message
news:uciLWEgEEHA.3088@tk2msftngp13.phx.gbl...
> Hi,
>
> No, but it is limited to one site per IP address
>
> --
> --Jonathan Maltz [Microsoft MVP - Windows Server, Virtual PC]
> http://www.visualwin.com - A Windows Server 2003 visual, step-by-step
> tutorial site :-)
> http://vpc.visualwin.com - Does <insert OS name> work on VPC 2004? Find

out
> here
> Only reply by newsgroup. I do not do technical support via email. Any
> emails I have not authorized are deleted before I see them.
>
>
> "Brian" <anonymous@discussions.microsoft.com> wrote in message
> news:1016501c411e8$884cb5b0$a601280a@phx
.gbl...
>
>



Brian

2004-03-25, 9:51 am

Thanks for the information.

>-----Original Message-----
>Not exactly, you can only have one SSL certificate per

IP/port combination,
>not just per IP address.
>
>Jerry
>
>"Jonathan Maltz [MS-MVP]" <jmaltz@mvps.org> wrote in

message
>news:uciLWEgEEHA.3088@tk2msftngp13.phx.gbl...
Virtual PC][color=darkred]
visual, step-by-step[color=darkred]
on VPC 2004? Find[color=darkred]
>out
via email. Any[color=darkred]
them.[color=darkred]
message[color=darkred]
the[color=darkred]
using[color=darkred]
only use[color=darkred]
>
>
>.
>

2004-03-25, 9:52 am

The certificate is installed for e.g.
mysite.mycompany.org. Can the certificate be changed over
to the port 81 site, and later changed back? The current
default site will be removed in a few weeks.

>-----Original Message-----
>Not exactly, you can only have one SSL certificate per

IP/port combination,
>not just per IP address.
>
>Jerry
>
>"Jonathan Maltz [MS-MVP]" <jmaltz@mvps.org> wrote in

message
>news:uciLWEgEEHA.3088@tk2msftngp13.phx.gbl...
Virtual PC][color=darkred]
visual, step-by-step[color=darkred]
on VPC 2004? Find[color=darkred]
>out
via email. Any[color=darkred]
them.[color=darkred]
message[color=darkred]
the[color=darkred]
using[color=darkred]
only use[color=darkred]
>
>
>.
>

Jerry Pisk

2004-03-25, 3:36 pm

The certificate doesn't care. You can setup IIS to use it for SSL on any ip
address and port you want.

Jerry

<anonymous@discussions.microsoft.com> wrote in message
news:1339f01c41272$fca65f30$a501280a@phx
.gbl...[color=darkred]
> The certificate is installed for e.g.
> mysite.mycompany.org. Can the certificate be changed over
> to the port 81 site, and later changed back? The current
> default site will be removed in a few weeks.
>
> IP/port combination,
> message
> Virtual PC]
> visual, step-by-step
> on VPC 2004? Find
> via email. Any
> them.
> message
> the
> using
> only use


Brian

2004-03-25, 4:51 pm

Thanks.

>-----Original Message-----
>The certificate doesn't care. You can setup IIS to use it

for SSL on any ip
>address and port you want.
>
>Jerry
>
><anonymous@discussions.microsoft.com> wrote in message
> news:1339f01c41272$fca65f30$a501280a@phx
.gbl...
over[color=darkred]
current[color=darkred]
support[color=darkred]
in[color=darkred]
>
>
>.
>

Jerry Pisk

2004-03-26, 11:49 am

The only problem is IIS as it will only allow a single certificate per site,
no matter how many IP addresses or ports it listens on. So you have to setup
a site in IIS for each site you're going to run, even when they are the same
sites that differ only in the domain name and certificate used.

Jerry

"Brian" <anonymous@discussions.microsoft.com> wrote in message
news:1370b01c412ab$372362b0$a301280a@phx
.gbl...[color=darkred]
> Thanks.
>
> for SSL on any ip
> over
> current
> support
> in


Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com