I recently downloaded an SSL certificate, imported it fine and enabled SSL o
n
the website.  Now I cannot access the website.  I don't get an error or
anything.  It just never comes up.

I am complete SSL \ IIS newbie.  Anyone have any suggestions on what to
check?  I followed all the documentation and it *should* work.

[ Post a follow-up to this message ]

Hi Mike,

Which version of IIS do you have? IIS 5? IIS 6?

Is SSL port assigned to your site? It should be TCP port 443.

What was a file extension on your certificate? Was it a .pfx or .cer?

--
Mike
Microsoft MVP - Windows Security


"Mike St.Onge" <MikeStOnge@discussions.microsoft.com> wrote in message
news:6848EA0E-67BF-4BF4-A0F6-93A8C8E8A91E@microsoft.com...
>I recently downloaded an SSL certificate, imported it fine and enabled SSL
>on
> the website.  Now I cannot access the website.  I don't get an error or
> anything.  It just never comes up.
>
> I am complete SSL \ IIS newbie.  Anyone have any suggestions on what to
> check?  I followed all the documentation and it *should* work.

[ Post a follow-up to this message ]

I am running IIS 6.  Yes, the SSL port is 443.

The certificate.  Hmmm ...   I had to cut and paste some stuff from an
internal CA and rename the .txt file to a .cer.  Should I have named it a
.pfx?

"Miha Pihler [MVP]" wrote:

> Hi Mike,
>
> Which version of IIS do you have? IIS 5? IIS 6?
>
> Is SSL port assigned to your site? It should be TCP port 443.
>
> What was a file extension on your certificate? Was it a .pfx or .cer?
>
> --
> Mike
> Microsoft MVP - Windows Security
>
>
> "Mike St.Onge" <MikeStOnge@discussions.microsoft.com> wrote in message
> news:6848EA0E-67BF-4BF4-A0F6-93A8C8E8A91E@microsoft.com... 
>
>
>

[ Post a follow-up to this message ]

Hi,

No, if you used internal CA then it should be OK...

When issuing the certificate, did you select the correct certificate
template (Web Server) template? Here is an example:
http://freeweb.siol.net/mpihler/webcert.jpg

--
Mike
Microsoft MVP - Windows Security

"Mike St.Onge" <MikeStOnge@discussions.microsoft.com> wrote in message
news:08A2062E-D659-4E1A-AA67-70DEB324867C@microsoft.com...[vbcol=seagreen]
>I am running IIS 6.  Yes, the SSL port is 443.
>
> The certificate.  Hmmm ...   I had to cut and paste some stuff from an
> internal CA and rename the .txt file to a .cer.  Should I have named it a
> .pfx?
>
> "Miha Pihler [MVP]" wrote:
> 

[ Post a follow-up to this message ]

Thats a good question, since I did not issue the certificate.  Let me ask th
e
issuer.

Would that cause this sort of problem?

"Miha Pihler [MVP]" wrote:

> Hi,
>
> No, if you used internal CA then it should be OK...
>
> When issuing the certificate, did you select the correct certificate
> template (Web Server) template? Here is an example:
> http://freeweb.siol.net/mpihler/webcert.jpg
>
> --
> Mike
> Microsoft MVP - Windows Security
>
> "Mike St.Onge" <MikeStOnge@discussions.microsoft.com> wrote in message
> news:08A2062E-D659-4E1A-AA67-70DEB324867C@microsoft.com... 
>
>
>

[ Post a follow-up to this message ]

If the issuer did not select the appropriate template (e.g. selected User
template instead of Web Server template) this  certificate will not work on
IIS.

--
Mike
Microsoft MVP - Windows Security

"Mike St.Onge" <MikeStOnge@discussions.microsoft.com> wrote in message
news:19F643A1-96E6-4434-8F30-C17A4AA50FB8@microsoft.com...[vbcol=seagreen]
> Thats a good question, since I did not issue the certificate.  Let me ask
> the
> issuer.
>
> Would that cause this sort of problem?
>
> "Miha Pihler [MVP]" wrote:
> 

[ Post a follow-up to this message ]

OK, I checked with the guy that issues the certs.  He's using Netscape
Certificates to issue the cert.  There is no option specifying what type of
cert he is issueing.  I looked over the whole thing with him.

Does this help any?  Any other ideas?

"Miha Pihler [MVP]" wrote:

> If the issuer did not select the appropriate template (e.g. selected User
> template instead of Web Server template) this  certificate will not work o
n
> IIS.
>
> --
> Mike
> Microsoft MVP - Windows Security
>
> "Mike St.Onge" <MikeStOnge@discussions.microsoft.com> wrote in message
> news:19F643A1-96E6-4434-8F30-C17A4AA50FB8@microsoft.com... 
>
>
>

[ Post a follow-up to this message ]

Hi,

Next thing you can do is run SSL Diag tool. That might tell us more where
the problem is...

You can get SSL Diag here:

SSL Diagnostics Version 1.0 (x86)
http://www.microsoft.com/downloads/...&DisplayLang=en

--
Mike
Microsoft MVP - Windows Security


"Mike St.Onge" <MikeStOnge@discussions.microsoft.com> wrote in message
news:6C0964D6-034C-4ACF-95C0-EEC2C125EF3F@microsoft.com...[vbcol=seagreen]
> OK, I checked with the guy that issues the certs.  He's using Netscape
> Certificates to issue the cert.  There is no option specifying what type
> of
> cert he is issueing.  I looked over the whole thing with him.
>
> Does this help any?  Any other ideas?
>
> "Miha Pihler [MVP]" wrote:
> 

[ Post a follow-up to this message ]

I might be on to something now.  I downloaded the tool and ran it.  It says
there is a conflict between site 1 (a parent site) and site 3 (site I'm
testing SSL on).  I never downloaded a cert for the parent site.  I've
requested a cert for the parent site now.

Would that have caused this problem?

"Miha Pihler [MVP]" wrote:

> Hi,
>
> Next thing you can do is run SSL Diag tool. That might tell us more where
> the problem is...
>
> You can get SSL Diag here:
>
> SSL Diagnostics Version 1.0 (x86)
> http://www.microsoft.com/downloads/...&DisplayLang=en
>
> --
> Mike
> Microsoft MVP - Windows Security
>
>
> "Mike St.Onge" <MikeStOnge@discussions.microsoft.com> wrote in message
> news:6C0964D6-034C-4ACF-95C0-EEC2C125EF3F@microsoft.com... 
>
>
>

[ Post a follow-up to this message ]

On Thu, 10 Feb 2005 07:07:03 -0800, Mike St.Onge
<MikeStOnge@discussions.microsoft.com> wrote:

>I might be on to something now.  I downloaded the tool and ran it.  It says
>there is a conflict between site 1 (a parent site) and site 3 (site I'm
>testing SSL on).  I never downloaded a cert for the parent site.  I've
>requested a cert for the parent site now.
>'

Wait a minute...  multiple SSL sites on one box?  Do in understand
correctly that is what you are doing?  How are you defining your
virtual web sites?  Do you have a different IP assigned to each?  You
can't do host headers will SSL if that is what you are trying to do.

sorry if I misunderstood

Hal
[vbcol=seagreen]
>Would that have caused this problem?
>
>"Miha Pihler [MVP]" wrote:
> 

[ Post a follow-up to this message ]