IIS Server Security - certificates and sub-webs of Default Web Site

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server Security > July 2005 > certificates and sub-webs of Default Web Site





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author certificates and sub-webs of Default Web Site
John Grandy

2005-07-21, 2:48 am

In IIS 5.1 and IIS 6.0 , do sub-webs of "Default Web Site" automatically
inherit a Server Certificate established for a "Default Web Site" ?

I see that my sub-webs all have the "View Certificate" button enabled , but
the "Server Certficate" button disabled.

I see that my "Default Web Site" has the "View Certificate" button enabled ,
and the "Server Certficate" button enabled.

When I click "View Certificate", the certificates for all sub-webs look
identical. I never established certificates for any of my sub-webs.

Is there some way to establish a separate certificate for a specific sub-web
?










Bernard Cheah [MVP]

2005-07-21, 2:48 am

When you say 'sub-webs', are you referring to those virtual
directories/directories under the website ? If yes, the behavior you see is
correct. SSL cert tight to website level and only one cert per site.

if you need those 'sub-webs' to have own SSL cert, you might want move it
out of the original website and create a new website for it, then assign the
ssl cert.

--
Regards,
Bernard Cheah
http://www.microsoft.com/iis/
http://www.iiswebcastseries.com/
http://www.msmvps.com/bernard/


"John Grandy" <johnagrandy-at-yahoo-dot-com> wrote in message
news:uBMSb3ZjFHA.1204@TK2MSFTNGP12.phx.gbl...
> In IIS 5.1 and IIS 6.0 , do sub-webs of "Default Web Site" automatically
> inherit a Server Certificate established for a "Default Web Site" ?
>
> I see that my sub-webs all have the "View Certificate" button enabled ,
> but the "Server Certficate" button disabled.
>
> I see that my "Default Web Site" has the "View Certificate" button enabled
> , and the "Server Certficate" button enabled.
>
> When I click "View Certificate", the certificates for all sub-webs look
> identical. I never established certificates for any of my sub-webs.
>
> Is there some way to establish a separate certificate for a specific
> sub-web ?
>
>
>
>
>
>
>
>
>
>



John Grandy

2005-07-21, 6:02 pm

Ok, so I need a separate website. However, I'm not seeing in IIS how to do
this ... there does not seem to be a menu choice for his action. Should
this task be performed outside of IIS ?


"Bernard Cheah [MVP]" <qbernard@hotmail.com.discuss> wrote in message
news:u4IJ1TcjFHA.3540@TK2MSFTNGP14.phx.gbl...
> When you say 'sub-webs', are you referring to those virtual
> directories/directories under the website ? If yes, the behavior you see
> is correct. SSL cert tight to website level and only one cert per site.
>
> if you need those 'sub-webs' to have own SSL cert, you might want move it
> out of the original website and create a new website for it, then assign
> the ssl cert.
>
> --
> Regards,
> Bernard Cheah
> http://www.microsoft.com/iis/
> http://www.iiswebcastseries.com/
> http://www.msmvps.com/bernard/
>
>
> "John Grandy" <johnagrandy-at-yahoo-dot-com> wrote in message
> news:uBMSb3ZjFHA.1204@TK2MSFTNGP12.phx.gbl...
>
>



John Grandy

2005-07-21, 6:02 pm

Interesting ...

In IIS 6.0 (on WS03) I see how to create a new website in IIS.msc.

But in IIS 5.1 (on WXP Pro SP2) I don't see how to create a new website in
IIS.msc.

Perhaps it can not be done ?


"Bernard Cheah [MVP]" <qbernard@hotmail.com.discuss> wrote in message
news:u4IJ1TcjFHA.3540@TK2MSFTNGP14.phx.gbl...
> When you say 'sub-webs', are you referring to those virtual
> directories/directories under the website ? If yes, the behavior you see
> is correct. SSL cert tight to website level and only one cert per site.
>
> if you need those 'sub-webs' to have own SSL cert, you might want move it
> out of the original website and create a new website for it, then assign
> the ssl cert.
>
> --
> Regards,
> Bernard Cheah
> http://www.microsoft.com/iis/
> http://www.iiswebcastseries.com/
> http://www.msmvps.com/bernard/
>
>
> "John Grandy" <johnagrandy-at-yahoo-dot-com> wrote in message
> news:uBMSb3ZjFHA.1204@TK2MSFTNGP12.phx.gbl...
>
>



Tom Pepper Willett

2005-07-21, 6:02 pm

Windows XP Pro is not a server O/S, and IIS 5.1 is limited to one default
web site.

Tom
"John Grandy" <johnagrandy-at-yahoo-dot-com> wrote in message
news:e6h0nEhjFHA.3608@TK2MSFTNGP12.phx.gbl...
| Interesting ...
|
| In IIS 6.0 (on WS03) I see how to create a new website in IIS.msc.
|
| But in IIS 5.1 (on WXP Pro SP2) I don't see how to create a new website in
| IIS.msc.
|
| Perhaps it can not be done ?
|
|
| "Bernard Cheah [MVP]" <qbernard@hotmail.com.discuss> wrote in message
| news:u4IJ1TcjFHA.3540@TK2MSFTNGP14.phx.gbl...
| > When you say 'sub-webs', are you referring to those virtual
| > directories/directories under the website ? If yes, the behavior you see
| > is correct. SSL cert tight to website level and only one cert per site.
| >
| > if you need those 'sub-webs' to have own SSL cert, you might want move
it
| > out of the original website and create a new website for it, then assign
| > the ssl cert.
| >
| > --
| > Regards,
| > Bernard Cheah
| > http://www.microsoft.com/iis/
| > http://www.iiswebcastseries.com/
| > http://www.msmvps.com/bernard/
| >
| >
| > "John Grandy" <johnagrandy-at-yahoo-dot-com> wrote in message
| > news:uBMSb3ZjFHA.1204@TK2MSFTNGP12.phx.gbl...
| >> In IIS 5.1 and IIS 6.0 , do sub-webs of "Default Web Site"
automatically
| >> inherit a Server Certificate established for a "Default Web Site" ?
| >>
| >> I see that my sub-webs all have the "View Certificate" button enabled ,
| >> but the "Server Certficate" button disabled.
| >>
| >> I see that my "Default Web Site" has the "View Certificate" button
| >> enabled , and the "Server Certficate" button enabled.
| >>
| >> When I click "View Certificate", the certificates for all sub-webs look
| >> identical. I never established certificates for any of my sub-webs.
| >>
| >> Is there some way to establish a separate certificate for a specific
| >> sub-web ?
| >>
| >>
| >>
| >>
| >>
| >>
| >>
| >>
| >>
| >>
| >
| >
|
|


Bernard Cheah [MVP]

2005-07-22, 2:56 am

Yes, Tom answered it. It's not possible in XP Pro or W2k Pro

--
Regards,
Bernard Cheah
http://www.microsoft.com/iis/
http://www.iiswebcastseries.com/
http://www.msmvps.com/bernard/


"John Grandy" <johnagrandy-at-yahoo-dot-com> wrote in message
news:e6h0nEhjFHA.3608@TK2MSFTNGP12.phx.gbl...
> Interesting ...
>
> In IIS 6.0 (on WS03) I see how to create a new website in IIS.msc.
>
> But in IIS 5.1 (on WXP Pro SP2) I don't see how to create a new website in
> IIS.msc.
>
> Perhaps it can not be done ?
>
>
> "Bernard Cheah [MVP]" <qbernard@hotmail.com.discuss> wrote in message
> news:u4IJ1TcjFHA.3540@TK2MSFTNGP14.phx.gbl...
>
>



Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com