IIS Server Security - SSL enabled site & DNS

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server Security > May 2006 > SSL enabled site & DNS





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author SSL enabled site & DNS
Vicky

2006-05-29, 5:30 pm

I created a test setup in a win 2003 std workgroup based network.

sys 1 configured as DNS, IIS & CA service.

Sys2 configured with two websites. The HHN for the fisrt web is www.abc.com
with ssl enabled & for the second it was www.xyz.com. that is a normal site

well every thing works fine. I access the ssl enabled site as
https://www.abc.com & the second site as http://www.xyz.com.

I discovered that when I type https://www.xyz.com i see the home page of my
first site. The site www.xyz.com is not ssl enabled. Why is it so?
Chris Crowe [ IIS MVP 1997 -> 2006 ]

2006-05-29, 5:30 pm

IIS does not support SSL and Hostheaders on the same site except under 1
condition which is using a Wildcard Certificate (both Expensive to buy and
not that useful in most cases)

Microsoft has produced a good tool to help diagnose SSL issues called
SSLDiag available from
http://www.microsoft.com/downloads/...&displaylang=en

In your case you really need a seperate IP Address to get around the issue
or make the 2nd site use the Host Header.
--


Cheers

Chris Crowe [IIS MVP 1997 -> 2006]
http://blog.crowe.co.nz
------------------------------------------------

"Vicky" <Vicky@discussions.microsoft.com> wrote in message
news:B984D7FA-6C67-4D9D-88F7-37ADCD866D9D@microsoft.com...
>I created a test setup in a win 2003 std workgroup based network.
>
> sys 1 configured as DNS, IIS & CA service.
>
> Sys2 configured with two websites. The HHN for the fisrt web is
> www.abc.com
> with ssl enabled & for the second it was www.xyz.com. that is a normal
> site
>
> well every thing works fine. I access the ssl enabled site as
> https://www.abc.com & the second site as http://www.xyz.com.
>
> I discovered that when I type https://www.xyz.com i see the home page of
> my
> first site. The site www.xyz.com is not ssl enabled. Why is it so?



Vicky

2006-05-29, 5:30 pm

Thank You so much

"Chris Crowe [ IIS MVP 1997 -> 2006 ]" wrote:

> IIS does not support SSL and Hostheaders on the same site except under 1
> condition which is using a Wildcard Certificate (both Expensive to buy and
> not that useful in most cases)
>
> Microsoft has produced a good tool to help diagnose SSL issues called
> SSLDiag available from
> http://www.microsoft.com/downloads/...&displaylang=en
>
> In your case you really need a seperate IP Address to get around the issue
> or make the 2nd site use the Host Header.
> --
>
>
> Cheers
>
> Chris Crowe [IIS MVP 1997 -> 2006]
> http://blog.crowe.co.nz
> ------------------------------------------------
>
> "Vicky" <Vicky@discussions.microsoft.com> wrote in message
> news:B984D7FA-6C67-4D9D-88F7-37ADCD866D9D@microsoft.com...
>
>
>

Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com