|
Home > Archive > IIS Server Security > July 2005 > certificates and sub-webs of Default Web Site
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
certificates and sub-webs of Default Web Site
|
|
| John Grandy 2005-07-21, 2:48 am |
| In IIS 5.1 and IIS 6.0 , do sub-webs of "Default Web Site" automatically
inherit a Server Certificate established for a "Default Web Site" ?
I see that my sub-webs all have the "View Certificate" button enabled , but
the "Server Certficate" button disabled.
I see that my "Default Web Site" has the "View Certificate" button enabled ,
and the "Server Certficate" button enabled.
When I click "View Certificate", the certificates for all sub-webs look
identical. I never established certificates for any of my sub-webs.
Is there some way to establish a separate certificate for a specific sub-web
?
| |
| Bernard Cheah [MVP] 2005-07-21, 2:48 am |
| When you say 'sub-webs', are you referring to those virtual
directories/directories under the website ? If yes, the behavior you see is
correct. SSL cert tight to website level and only one cert per site.
if you need those 'sub-webs' to have own SSL cert, you might want move it
out of the original website and create a new website for it, then assign the
ssl cert.
--
Regards,
Bernard Cheah
http://www.microsoft.com/iis/
http://www.iiswebcastseries.com/
http://www.msmvps.com/bernard/
"John Grandy" <johnagrandy-at-yahoo-dot-com> wrote in message
news:uBMSb3ZjFHA.1204@TK2MSFTNGP12.phx.gbl...
> In IIS 5.1 and IIS 6.0 , do sub-webs of "Default Web Site" automatically
> inherit a Server Certificate established for a "Default Web Site" ?
>
> I see that my sub-webs all have the "View Certificate" button enabled ,
> but the "Server Certficate" button disabled.
>
> I see that my "Default Web Site" has the "View Certificate" button enabled
> , and the "Server Certficate" button enabled.
>
> When I click "View Certificate", the certificates for all sub-webs look
> identical. I never established certificates for any of my sub-webs.
>
> Is there some way to establish a separate certificate for a specific
> sub-web ?
>
>
>
>
>
>
>
>
>
>
| |
| John Grandy 2005-07-21, 6:02 pm |
| Ok, so I need a separate website. However, I'm not seeing in IIS how to do
this ... there does not seem to be a menu choice for his action. Should
this task be performed outside of IIS ?
"Bernard Cheah [MVP]" <qbernard@hotmail.com.discuss> wrote in message
news:u4IJ1TcjFHA.3540@TK2MSFTNGP14.phx.gbl...
> When you say 'sub-webs', are you referring to those virtual
> directories/directories under the website ? If yes, the behavior you see
> is correct. SSL cert tight to website level and only one cert per site.
>
> if you need those 'sub-webs' to have own SSL cert, you might want move it
> out of the original website and create a new website for it, then assign
> the ssl cert.
>
> --
> Regards,
> Bernard Cheah
> http://www.microsoft.com/iis/
> http://www.iiswebcastseries.com/
> http://www.msmvps.com/bernard/
>
>
> "John Grandy" <johnagrandy-at-yahoo-dot-com> wrote in message
> news:uBMSb3ZjFHA.1204@TK2MSFTNGP12.phx.gbl...
>
>
| |
| John Grandy 2005-07-21, 6:02 pm |
| Interesting ...
In IIS 6.0 (on WS03) I see how to create a new website in IIS.msc.
But in IIS 5.1 (on WXP Pro SP2) I don't see how to create a new website in
IIS.msc.
Perhaps it can not be done ?
"Bernard Cheah [MVP]" <qbernard@hotmail.com.discuss> wrote in message
news:u4IJ1TcjFHA.3540@TK2MSFTNGP14.phx.gbl...
> When you say 'sub-webs', are you referring to those virtual
> directories/directories under the website ? If yes, the behavior you see
> is correct. SSL cert tight to website level and only one cert per site.
>
> if you need those 'sub-webs' to have own SSL cert, you might want move it
> out of the original website and create a new website for it, then assign
> the ssl cert.
>
> --
> Regards,
> Bernard Cheah
> http://www.microsoft.com/iis/
> http://www.iiswebcastseries.com/
> http://www.msmvps.com/bernard/
>
>
> "John Grandy" <johnagrandy-at-yahoo-dot-com> wrote in message
> news:uBMSb3ZjFHA.1204@TK2MSFTNGP12.phx.gbl...
>
>
| |
| Tom Pepper Willett 2005-07-21, 6:02 pm |
| Windows XP Pro is not a server O/S, and IIS 5.1 is limited to one default
web site.
Tom
"John Grandy" <johnagrandy-at-yahoo-dot-com> wrote in message
news:e6h0nEhjFHA.3608@TK2MSFTNGP12.phx.gbl...
| Interesting ...
|
| In IIS 6.0 (on WS03) I see how to create a new website in IIS.msc.
|
| But in IIS 5.1 (on WXP Pro SP2) I don't see how to create a new website in
| IIS.msc.
|
| Perhaps it can not be done ?
|
|
| "Bernard Cheah [MVP]" <qbernard@hotmail.com.discuss> wrote in message
| news:u4IJ1TcjFHA.3540@TK2MSFTNGP14.phx.gbl...
| > When you say 'sub-webs', are you referring to those virtual
| > directories/directories under the website ? If yes, the behavior you see
| > is correct. SSL cert tight to website level and only one cert per site.
| >
| > if you need those 'sub-webs' to have own SSL cert, you might want move
it
| > out of the original website and create a new website for it, then assign
| > the ssl cert.
| >
| > --
| > Regards,
| > Bernard Cheah
| > http://www.microsoft.com/iis/
| > http://www.iiswebcastseries.com/
| > http://www.msmvps.com/bernard/
| >
| >
| > "John Grandy" <johnagrandy-at-yahoo-dot-com> wrote in message
| > news:uBMSb3ZjFHA.1204@TK2MSFTNGP12.phx.gbl...
| >> In IIS 5.1 and IIS 6.0 , do sub-webs of "Default Web Site"
automatically
| >> inherit a Server Certificate established for a "Default Web Site" ?
| >>
| >> I see that my sub-webs all have the "View Certificate" button enabled ,
| >> but the "Server Certficate" button disabled.
| >>
| >> I see that my "Default Web Site" has the "View Certificate" button
| >> enabled , and the "Server Certficate" button enabled.
| >>
| >> When I click "View Certificate", the certificates for all sub-webs look
| >> identical. I never established certificates for any of my sub-webs.
| >>
| >> Is there some way to establish a separate certificate for a specific
| >> sub-web ?
| >>
| >>
| >>
| >>
| >>
| >>
| >>
| >>
| >>
| >>
| >
| >
|
|
| |
| Bernard Cheah [MVP] 2005-07-22, 2:56 am |
| Yes, Tom answered it. It's not possible in XP Pro or W2k Pro
--
Regards,
Bernard Cheah
http://www.microsoft.com/iis/
http://www.iiswebcastseries.com/
http://www.msmvps.com/bernard/
"John Grandy" <johnagrandy-at-yahoo-dot-com> wrote in message
news:e6h0nEhjFHA.3608@TK2MSFTNGP12.phx.gbl...
> Interesting ...
>
> In IIS 6.0 (on WS03) I see how to create a new website in IIS.msc.
>
> But in IIS 5.1 (on WXP Pro SP2) I don't see how to create a new website in
> IIS.msc.
>
> Perhaps it can not be done ?
>
>
> "Bernard Cheah [MVP]" <qbernard@hotmail.com.discuss> wrote in message
> news:u4IJ1TcjFHA.3540@TK2MSFTNGP14.phx.gbl...
>
>
|
|
|
|
|