Home All Groups Group Topic Archive Search About

certificates and sub-webs of Default Web Site

Author
21 Jul 2005 2:42 AM
John Grandy
In IIS 5.1 and IIS 6.0 , do sub-webs of "Default Web Site" automatically
inherit a Server Certificate established for a "Default Web Site" ?

I see that my sub-webs all have the "View Certificate" button enabled , but
the "Server Certficate" button disabled.

I see that my "Default Web Site" has the "View Certificate" button enabled ,
and the "Server Certficate" button enabled.

When I click "View Certificate", the certificates for all sub-webs look
identical.  I never established certificates for any of my sub-webs.

Is there some way to establish a separate certificate for a specific sub-web
?

Author
21 Jul 2005 7:22 AM
Bernard Cheah [MVP]
When you say 'sub-webs', are you referring to those virtual
directories/directories under the website ? If yes, the behavior you see is
correct. SSL cert tight to website level and only one cert per site.

if you need those 'sub-webs' to have own SSL cert, you might want move it
out of the original website and create a new website for it, then assign the
ssl cert.

Show quoteHide quote
"John Grandy" <johnagrandy-at-yahoo-dot-com> wrote in message
news:uBMSb3ZjFHA.1204@TK2MSFTNGP12.phx.gbl...
> In IIS 5.1 and IIS 6.0 , do sub-webs of "Default Web Site" automatically
> inherit a Server Certificate established for a "Default Web Site" ?
>
> I see that my sub-webs all have the "View Certificate" button enabled ,
> but the "Server Certficate" button disabled.
>
> I see that my "Default Web Site" has the "View Certificate" button enabled
> , and the "Server Certficate" button enabled.
>
> When I click "View Certificate", the certificates for all sub-webs look
> identical.  I never established certificates for any of my sub-webs.
>
> Is there some way to establish a separate certificate for a specific
> sub-web ?
>
>
>
>
>
>
>
>
>
>
Author
21 Jul 2005 4:23 PM
John Grandy
Ok, so I need a separate website.  However, I'm not seeing in IIS how to do
this ... there does not seem to be a menu choice for his action.  Should
this task be performed outside of IIS ?


Show quoteHide quote
"Bernard Cheah [MVP]" <qbern***@hotmail.com.discuss> wrote in message
news:u4IJ1TcjFHA.3540@TK2MSFTNGP14.phx.gbl...
> When you say 'sub-webs', are you referring to those virtual
> directories/directories under the website ? If yes, the behavior you see
> is correct. SSL cert tight to website level and only one cert per site.
>
> if you need those 'sub-webs' to have own SSL cert, you might want move it
> out of the original website and create a new website for it, then assign
> the ssl cert.
>
> --
> Regards,
> Bernard Cheah
> http://www.microsoft.com/iis/
> http://www.iiswebcastseries.com/
> http://www.msmvps.com/bernard/
>
>
> "John Grandy" <johnagrandy-at-yahoo-dot-com> wrote in message
> news:uBMSb3ZjFHA.1204@TK2MSFTNGP12.phx.gbl...
>> In IIS 5.1 and IIS 6.0 , do sub-webs of "Default Web Site" automatically
>> inherit a Server Certificate established for a "Default Web Site" ?
>>
>> I see that my sub-webs all have the "View Certificate" button enabled ,
>> but the "Server Certficate" button disabled.
>>
>> I see that my "Default Web Site" has the "View Certificate" button
>> enabled , and the "Server Certficate" button enabled.
>>
>> When I click "View Certificate", the certificates for all sub-webs look
>> identical.  I never established certificates for any of my sub-webs.
>>
>> Is there some way to establish a separate certificate for a specific
>> sub-web ?
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>
>
Author
21 Jul 2005 4:27 PM
John Grandy
Interesting ...

In IIS 6.0 (on WS03) I see how to create a new website in IIS.msc.

But in IIS 5.1 (on WXP Pro SP2) I don't see how to create a new website in
IIS.msc.

Perhaps it can not be done ?


Show quoteHide quote
"Bernard Cheah [MVP]" <qbern***@hotmail.com.discuss> wrote in message
news:u4IJ1TcjFHA.3540@TK2MSFTNGP14.phx.gbl...
> When you say 'sub-webs', are you referring to those virtual
> directories/directories under the website ? If yes, the behavior you see
> is correct. SSL cert tight to website level and only one cert per site.
>
> if you need those 'sub-webs' to have own SSL cert, you might want move it
> out of the original website and create a new website for it, then assign
> the ssl cert.
>
> --
> Regards,
> Bernard Cheah
> http://www.microsoft.com/iis/
> http://www.iiswebcastseries.com/
> http://www.msmvps.com/bernard/
>
>
> "John Grandy" <johnagrandy-at-yahoo-dot-com> wrote in message
> news:uBMSb3ZjFHA.1204@TK2MSFTNGP12.phx.gbl...
>> In IIS 5.1 and IIS 6.0 , do sub-webs of "Default Web Site" automatically
>> inherit a Server Certificate established for a "Default Web Site" ?
>>
>> I see that my sub-webs all have the "View Certificate" button enabled ,
>> but the "Server Certficate" button disabled.
>>
>> I see that my "Default Web Site" has the "View Certificate" button
>> enabled , and the "Server Certficate" button enabled.
>>
>> When I click "View Certificate", the certificates for all sub-webs look
>> identical.  I never established certificates for any of my sub-webs.
>>
>> Is there some way to establish a separate certificate for a specific
>> sub-web ?
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>
>
Author
21 Jul 2005 4:59 PM
Tom Pepper Willett
Windows XP Pro is not a server O/S, and IIS 5.1 is limited to one default
web site.

Tom
Show quoteHide quote
"John Grandy" <johnagrandy-at-yahoo-dot-com> wrote in message
news:e6h0nEhjFHA.3608@TK2MSFTNGP12.phx.gbl...
| Interesting ...
|
| In IIS 6.0 (on WS03) I see how to create a new website in IIS.msc.
|
| But in IIS 5.1 (on WXP Pro SP2) I don't see how to create a new website in
| IIS.msc.
|
| Perhaps it can not be done ?
|
|
| "Bernard Cheah [MVP]" <qbern***@hotmail.com.discuss> wrote in message
| news:u4IJ1TcjFHA.3540@TK2MSFTNGP14.phx.gbl...
| > When you say 'sub-webs', are you referring to those virtual
| > directories/directories under the website ? If yes, the behavior you see
| > is correct. SSL cert tight to website level and only one cert per site.
| >
| > if you need those 'sub-webs' to have own SSL cert, you might want move
it
| > out of the original website and create a new website for it, then assign
| > the ssl cert.
| >
| > --
| > Regards,
| > Bernard Cheah
| > http://www.microsoft.com/iis/
| > http://www.iiswebcastseries.com/
| > http://www.msmvps.com/bernard/
| >
| >
| > "John Grandy" <johnagrandy-at-yahoo-dot-com> wrote in message
| > news:uBMSb3ZjFHA.1204@TK2MSFTNGP12.phx.gbl...
| >> In IIS 5.1 and IIS 6.0 , do sub-webs of "Default Web Site"
automatically
| >> inherit a Server Certificate established for a "Default Web Site" ?
| >>
| >> I see that my sub-webs all have the "View Certificate" button enabled ,
| >> but the "Server Certficate" button disabled.
| >>
| >> I see that my "Default Web Site" has the "View Certificate" button
| >> enabled , and the "Server Certficate" button enabled.
| >>
| >> When I click "View Certificate", the certificates for all sub-webs look
| >> identical.  I never established certificates for any of my sub-webs.
| >>
| >> Is there some way to establish a separate certificate for a specific
| >> sub-web ?
| >>
| >>
| >>
| >>
| >>
| >>
| >>
| >>
| >>
| >>
| >
| >
|
|
Author
22 Jul 2005 7:48 AM
Bernard Cheah [MVP]
Yes, Tom answered it. It's not possible in XP Pro or W2k Pro

Show quoteHide quote
"John Grandy" <johnagrandy-at-yahoo-dot-com> wrote in message
news:e6h0nEhjFHA.3608@TK2MSFTNGP12.phx.gbl...
> Interesting ...
>
> In IIS 6.0 (on WS03) I see how to create a new website in IIS.msc.
>
> But in IIS 5.1 (on WXP Pro SP2) I don't see how to create a new website in
> IIS.msc.
>
> Perhaps it can not be done ?
>
>
> "Bernard Cheah [MVP]" <qbern***@hotmail.com.discuss> wrote in message
> news:u4IJ1TcjFHA.3540@TK2MSFTNGP14.phx.gbl...
>> When you say 'sub-webs', are you referring to those virtual
>> directories/directories under the website ? If yes, the behavior you see
>> is correct. SSL cert tight to website level and only one cert per site.
>>
>> if you need those 'sub-webs' to have own SSL cert, you might want move it
>> out of the original website and create a new website for it, then assign
>> the ssl cert.
>>
>> --
>> Regards,
>> Bernard Cheah
>> http://www.microsoft.com/iis/
>> http://www.iiswebcastseries.com/
>> http://www.msmvps.com/bernard/
>>
>>
>> "John Grandy" <johnagrandy-at-yahoo-dot-com> wrote in message
>> news:uBMSb3ZjFHA.1204@TK2MSFTNGP12.phx.gbl...
>>> In IIS 5.1 and IIS 6.0 , do sub-webs of "Default Web Site" automatically
>>> inherit a Server Certificate established for a "Default Web Site" ?
>>>
>>> I see that my sub-webs all have the "View Certificate" button enabled ,
>>> but the "Server Certficate" button disabled.
>>>
>>> I see that my "Default Web Site" has the "View Certificate" button
>>> enabled , and the "Server Certficate" button enabled.
>>>
>>> When I click "View Certificate", the certificates for all sub-webs look
>>> identical.  I never established certificates for any of my sub-webs.
>>>
>>> Is there some way to establish a separate certificate for a specific
>>> sub-web ?
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>
>>
>
>