IIS Server Security - IIS 6.0 SSL problem

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server Security > April 2006 > IIS 6.0 SSL problem





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author IIS 6.0 SSL problem
Joshua Bright

2006-04-27, 7:52 am

Environment:

Windows 2003 SP1
Exchange 2003 SP2


Problem:

I'm trying to install a SSL certificate for OWA (default site). I've used
SelfSSL out of the IIS Resource Kit. I installed the certificate through the
CLI, and went to edit the options under the Directory Security Tab in the
properties of Exchange (under Default Web Site): I was unable to get a
response when I clicked the Edit button. I tried to click the Server
Certificate button with no response as well. In addition, I'm not able to
access OWA with this certificate installed as is. I've uninstalled the
certificate through certificate manager (personal and trusted). When I go
back to the Directory Security Tab I'm unable to get a response from any of
the buttons (Server Certificate, Edit, or View Certificate). Does anyone
have any ideas on this? I would like to get this up ASAP. Thanks guys!


David Wang [Msft]

2006-04-27, 7:52 am

Just running the SelfSSL tool configures everything in IIS and enables SSL
for the Default Web Site.

If SSL does not work after that, use SSLDiag to diagnose.
http://www.microsoft.com/windowsser...ls/default.mspx

I just installed WS03SP1, ran SelfSSL, and SSL was working on Default
Website. I even installed SBS2003 (which has Exchange), ran SelfSSL, and SSL
work working immediately. This is all default installation. Thus I believe
the most likely cause of failure is user-lockdown of arbitrary server
settings that breaks things.

--
//David
IIS
http://blogs.msdn.com/David.Wang
This posting is provided "AS IS" with no warranties, and confers no rights.
//

"Joshua Bright" <JoshuaBright@discussions.microsoft.com> wrote in message
news:8FAB186C-F59C-4D4A-A5DD-56F18AAF7D62@microsoft.com...
> Environment:
>
> Windows 2003 SP1
> Exchange 2003 SP2
>
>
> Problem:
>
> I'm trying to install a SSL certificate for OWA (default site). I've used
> SelfSSL out of the IIS Resource Kit. I installed the certificate through
> the
> CLI, and went to edit the options under the Directory Security Tab in the
> properties of Exchange (under Default Web Site): I was unable to get a
> response when I clicked the Edit button. I tried to click the Server
> Certificate button with no response as well. In addition, I'm not able to
> access OWA with this certificate installed as is. I've uninstalled the
> certificate through certificate manager (personal and trusted). When I go
> back to the Directory Security Tab I'm unable to get a response from any
> of
> the buttons (Server Certificate, Edit, or View Certificate). Does anyone
> have any ideas on this? I would like to get this up ASAP. Thanks guys!
>
>




Joshua Bright

2006-04-27, 7:52 am

Do you have any ideas on how I would go about figuring this out?

"David Wang [Msft]" wrote:

> Just running the SelfSSL tool configures everything in IIS and enables SSL
> for the Default Web Site.
>
> If SSL does not work after that, use SSLDiag to diagnose.
> http://www.microsoft.com/windowsser...ls/default.mspx
>
> I just installed WS03SP1, ran SelfSSL, and SSL was working on Default
> Website. I even installed SBS2003 (which has Exchange), ran SelfSSL, and SSL
> work working immediately. This is all default installation. Thus I believe
> the most likely cause of failure is user-lockdown of arbitrary server
> settings that breaks things.
>
> --
> //David
> IIS
> http://blogs.msdn.com/David.Wang
> This posting is provided "AS IS" with no warranties, and confers no rights.
> //
>
> "Joshua Bright" <JoshuaBright@discussions.microsoft.com> wrote in message
> news:8FAB186C-F59C-4D4A-A5DD-56F18AAF7D62@microsoft.com...
>
>
>
>

David Wang [Msft]

2006-04-27, 7:52 am

I suggest running SSLDiag to troubleshoot. URL is in my prior post.

I can only say that you already did more steps than I did to get SSL working
on SBS2003. Based on your steps, I do not think you have a Server
Certificate installed at all.

--
//David
IIS
http://blogs.msdn.com/David.Wang
This posting is provided "AS IS" with no warranties, and confers no rights.
//

"Joshua Bright" <JoshuaBright@discussions.microsoft.com> wrote in message
news:09805CDD-A7B2-43F4-AE32-30E66382E55A@microsoft.com...[vbcol=seagreen]
> Do you have any ideas on how I would go about figuring this out?
>
> "David Wang [Msft]" wrote:
>




Joshua Bright

2006-04-27, 7:52 am

That is true I do not have a certificate installed. The problem that I'm
having is that the certificate wizard is not coming up when I click the
button in inetmgr (Right click Default Web Site, Properties, Directory
Security).

"David Wang [Msft]" wrote:

> I suggest running SSLDiag to troubleshoot. URL is in my prior post.
>
> I can only say that you already did more steps than I did to get SSL working
> on SBS2003. Based on your steps, I do not think you have a Server
> Certificate installed at all.
>
> --
> //David
> IIS
> http://blogs.msdn.com/David.Wang
> This posting is provided "AS IS" with no warranties, and confers no rights.
> //
>
> "Joshua Bright" <JoshuaBright@discussions.microsoft.com> wrote in message
> news:09805CDD-A7B2-43F4-AE32-30E66382E55A@microsoft.com...
>
>
>
>
>

Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com