IIS Server Security - Wrong cert for ssl site shows up

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server Security > November 2006 > Wrong cert for ssl site shows up





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author Wrong cert for ssl site shows up
CGTech

2006-11-17, 1:22 pm

Configuration as follows:

Running ISA2004 as firewall/proxy/publishing server, one exchange server,
one web server.
Exchange server has OWA setup with SSL, therefore the ISA has a listener for
port 443. I setup a second listener useing SSL port 444, with a secure web
site rule pointing to the web server, all setup for port 444. A certificate
for that specifice site has been generated and installed on the web site, and
when you view the installed certificate, it is the correct one. but when you
try to open the web site thru IIS manager on the web server, and go to that
link, I get the certificate for the exchange server come up. Any thoughts?
I'm stumped!
Miha Pihler [MVP]

2006-11-19, 7:20 pm

Hi,

Are Exchange server and Web server running on the same hardware or are these
two separate servers?

When browsing to the website do you specify the port? E.g.
https://webserver:444/ ?

--
Mike
Microsoft MVP - Windows Security

"CGTech" <CGTech@discussions.microsoft.com> wrote in message
news:093FEC00-F668-4F1E-8027-D63E8C44ABD9@microsoft.com...
> Configuration as follows:
>
> Running ISA2004 as firewall/proxy/publishing server, one exchange server,
> one web server.
> Exchange server has OWA setup with SSL, therefore the ISA has a listener
> for
> port 443. I setup a second listener useing SSL port 444, with a secure web
> site rule pointing to the web server, all setup for port 444. A
> certificate
> for that specifice site has been generated and installed on the web site,
> and
> when you view the installed certificate, it is the correct one. but when
> you
> try to open the web site thru IIS manager on the web server, and go to
> that
> link, I get the certificate for the exchange server come up. Any thoughts?
> I'm stumped!



CGTech

2006-11-20, 1:17 pm

yes to both questions.

"Miha Pihler [MVP]" wrote:

> Hi,
>
> Are Exchange server and Web server running on the same hardware or are these
> two separate servers?
>
> When browsing to the website do you specify the port? E.g.
> https://webserver:444/ ?
>
> --
> Mike
> Microsoft MVP - Windows Security
>
> "CGTech" <CGTech@discussions.microsoft.com> wrote in message
> news:093FEC00-F668-4F1E-8027-D63E8C44ABD9@microsoft.com...
>
>
>

CGTech

2006-11-20, 1:17 pm

HA! Just reread my reply, yes exchange and the web server are on seperate
boxes.

"CGTech" wrote:
[vbcol=seagreen]
> yes to both questions.
>
> "Miha Pihler [MVP]" wrote:
>
Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com