IIS Server Security - How do i setup multiple websites using ssl ?

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server Security > December 2007 > How do i setup multiple websites using ssl ?





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author How do i setup multiple websites using ssl ?
Ramon Franzel

2007-11-16, 1:39 pm

We are running multiple website on iis 6.0.
There are a couple of websites that have to run ssl.
Each website has it's own ip adres and in is registerd in dns according to
this ip.
I tried the following method to achieve this.

example

customer1.domain.com : port 80:62.55.33.11 443:62.55.33.11 require ssl checked
customer2.domain.com : port 80:62.55.33.12 443:62.55.33.12 require ssl checked

strange things happen when i try to do this :

http://customer2.domain.com it redirects to the website from customer1 with
the following url : https://customer1.domain.com

I checked the metabase explorer for the "securebindings" option and also
tried to put in the hostheader there.
I also enabled the "enable metabase editing while iis is running" option.

My question : How do i configure iis to get several websites running on ssl.
By using the "require ssl" because i wan't them to redirect to https.

Thanks in advance.
Ken Schaefer

2007-11-17, 1:32 pm

If you select the "require HTTPS" setting, IIS does not redirect anyone by
default (instead they get a 401 - Forbidden: SSL Required error message)

So, if the user is being redirected when attempting HTTP access, then
something you are doing is causing that redirect. You need to look into
that.

Cheers
Ken


--
My IIS Blog: www.adOpenStatic.com/cs/blogs/ken

"Ramon Franzel" <Ramon Franzel@discussions.microsoft.com> wrote in message
news:D8D814A9-C4E1-4E1E-92A1-B6D9F950E3FE@microsoft.com...
> We are running multiple website on iis 6.0.
> There are a couple of websites that have to run ssl.
> Each website has it's own ip adres and in is registerd in dns according to
> this ip.
> I tried the following method to achieve this.
>
> example
>
> customer1.domain.com : port 80:62.55.33.11 443:62.55.33.11 require ssl
> checked
> customer2.domain.com : port 80:62.55.33.12 443:62.55.33.12 require ssl
> checked
>
> strange things happen when i try to do this :
>
> http://customer2.domain.com it redirects to the website from customer1
> with
> the following url : https://customer1.domain.com
>
> I checked the metabase explorer for the "securebindings" option and also
> tried to put in the hostheader there.
> I also enabled the "enable metabase editing while iis is running" option.
>
> My question : How do i configure iis to get several websites running on
> ssl.
> By using the "require ssl" because i wan't them to redirect to https.
>
> Thanks in advance.


THKS

2007-12-18, 1:40 am

Follow these steps and see.

assign certificates to each site through IIS.(you should be having 2
different certificates)
assign port 443 to the respective IP's through IIS (host headers won't help
because SSL does not support host headers)
make a virtual folder under each site pointing to the web content and keep
require ssl checked only to that virtual folder.
in the root of the each site, place a redirect page which can redirect http
to https: with the complete URL pointing to http:\\site\virtualfolder. make
this redirect pages as default on each site.


"Ramon Franzel" wrote:

> We are running multiple website on iis 6.0.
> There are a couple of websites that have to run ssl.
> Each website has it's own ip adres and in is registerd in dns according to
> this ip.
> I tried the following method to achieve this.
>
> example
>
> customer1.domain.com : port 80:62.55.33.11 443:62.55.33.11 require ssl checked
> customer2.domain.com : port 80:62.55.33.12 443:62.55.33.12 require ssl checked
>
> strange things happen when i try to do this :
>
> http://customer2.domain.com it redirects to the website from customer1 with
> the following url : https://customer1.domain.com
>
> I checked the metabase explorer for the "securebindings" option and also
> tried to put in the hostheader there.
> I also enabled the "enable metabase editing while iis is running" option.
>
> My question : How do i configure iis to get several websites running on ssl.
> By using the "require ssl" because i wan't them to redirect to https.
>
> Thanks in advance.

Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com