ITS Windows 2003 IIS 6.0 SSL

15 Dec 2006 2:17 PM

Patrick

I have installed:
SAP ITS 6200, Windows Server 2003 with IIS 6.0, Jave (JRE) 1.4.2_12

I downloaded the IIS 6.0 Resource Kit and used the SelfSSL program to
create a certificate for our Development/Test environment.

Using IE 6, I am able to reach the unsecure port for our Test site:
http://testserver:1193/folder/transaction/!

When trying the secure port 443 (or 444), I receive the following error:
https://testserver:444/folder/transaction/!
"HTTP Error 404 - File or directory not found."

- Is this a valid certificate test?
Tried server short name and fully qualified name in the certificate.
- Is there another way to test a secure port in Development?
- Is there some secure port blocking defaulted on in IIS 6.0 or ITS 6.2?

Thanks

16 Dec 2006 9:37 AM

David Wang

Sounds like a problem with ITS 6.2 configuration or some networking
misconfiguration between the client and server.

https://testserver:444 or https://testserver (if port is 443) works by
default when you run SelfSSL. Used it many times myself.

IIS and HTTP.SYS does not return the 404 error you showed, so the error
is either coming from ITS 6.2 (or other server-side custom software),
or the request is not routed to IIS but rather some other server's
application returning 404.

> - Is this a valid certificate test?
Yes

> Tried server short name and fully qualified name in the certificate.

That really does not matter and even if it did, it should not result in
404.

> - Is there another way to test a secure port in Development?

Not really. https:// requires a Server Certificate configured in IIS
and a SecureBinding for the website using Secured Port. SelfSSL does
everything necessary to have https:// work by default.

> - Is there some secure port blocking defaulted on in IIS 6.0 or ITS 6.2?

No for IIS 6.0. I know nothing about ITS 6.2.

//David
http://w3-4u.blogspot.com
http://blogs.msdn.com/David.Wang
//

Patrick wrote:
Show quoteHide quote

> I have installed:
> SAP ITS 6200, Windows Server 2003 with IIS 6.0, Jave (JRE) 1.4.2_12
>
> I downloaded the IIS 6.0 Resource Kit and used the SelfSSL program to
> create a certificate for our Development/Test environment.
>
> Using IE 6, I am able to reach the unsecure port for our Test site:
> http://testserver:1193/folder/transaction/!
>
> When trying the secure port 443 (or 444), I receive the following error:
> https://testserver:444/folder/transaction/!
> "HTTP Error 404 - File or directory not found."
>
> - Is this a valid certificate test?
> Tried server short name and fully qualified name in the certificate.
> - Is there another way to test a secure port in Development?
> - Is there some secure port blocking defaulted on in IIS 6.0 or ITS 6.2?
>
> Thanks

18 Dec 2006 12:55 PM

Patrick

Thanks David,

It was indeed the ITS 6.20 configuration.

I had to manually add an entry for port 443 in the ItsRegistryWGATE.xml file.
(or use wgate-config utility)

It seems like there would be an easier way to do this, but I didn't find it
in the docs. Possibly I had to define the IIS site with both unsecure and
secure ports, and then ITS install would have recognized both and
automatically updated the ItsRegistryWGATE.xml file.

Thanks for your help.

Patrick

Show quoteHide quote

"David Wang" wrote:

> Sounds like a problem with ITS 6.2 configuration or some networking
> misconfiguration between the client and server.
>
> https://testserver:444 or https://testserver (if port is 443) works by
> default when you run SelfSSL. Used it many times myself.
>
> IIS and HTTP.SYS does not return the 404 error you showed, so the error
> is either coming from ITS 6.2 (or other server-side custom software),
> or the request is not routed to IIS but rather some other server's
> application returning 404.
>
> > - Is this a valid certificate test?
> Yes
>
> > Tried server short name and fully qualified name in the certificate.
> That really does not matter and even if it did, it should not result in
> 404.
>
> > - Is there another way to test a secure port in Development?
> Not really. https:// requires a Server Certificate configured in IIS
> and a SecureBinding for the website using Secured Port. SelfSSL does
> everything necessary to have https:// work by default.
>
> > - Is there some secure port blocking defaulted on in IIS 6.0 or ITS 6.2?
> No for IIS 6.0. I know nothing about ITS 6.2.
>
>
>
> //David
> http://w3-4u.blogspot.com
> http://blogs.msdn.com/David.Wang
> //
>
>
>
> Patrick wrote:
> > I have installed:
> > SAP ITS 6200, Windows Server 2003 with IIS 6.0, Jave (JRE) 1.4.2_12
> >
> > I downloaded the IIS 6.0 Resource Kit and used the SelfSSL program to
> > create a certificate for our Development/Test environment.
> >
> > Using IE 6, I am able to reach the unsecure port for our Test site:
> > http://testserver:1193/folder/transaction/!
> >
> > When trying the secure port 443 (or 444), I receive the following error:
> > https://testserver:444/folder/transaction/!
> > "HTTP Error 404 - File or directory not found."
> >
> > - Is this a valid certificate test?
> > Tried server short name and fully qualified name in the certificate.
> > - Is there another way to test a secure port in Development?
> > - Is there some secure port blocking defaulted on in IIS 6.0 or ITS 6.2?
> >
> > Thanks
>
>

ITS Windows 2003 IIS 6.0 SSL - error 404