|
security
newsgroups
|
|||||||||||||||||||||||
|
|||||||||||||||||||||||
IIS 6.0 SSL problemWindows 2003 SP1 Exchange 2003 SP2 Problem: I'm trying to install a SSL certificate for OWA (default site). I've used SelfSSL out of the IIS Resource Kit. I installed the certificate through the CLI, and went to edit the options under the Directory Security Tab in the properties of Exchange (under Default Web Site): I was unable to get a response when I clicked the Edit button. I tried to click the Server Certificate button with no response as well. In addition, I'm not able to access OWA with this certificate installed as is. I've uninstalled the certificate through certificate manager (personal and trusted). When I go back to the Directory Security Tab I'm unable to get a response from any of the buttons (Server Certificate, Edit, or View Certificate). Does anyone have any ideas on this? I would like to get this up ASAP. Thanks guys! Just running the SelfSSL tool configures everything in IIS and enables SSL
for the Default Web Site. If SSL does not work after that, use SSLDiag to diagnose. http://www.microsoft.com/windowsserver2003/iis/diagnostictools/default.mspx I just installed WS03SP1, ran SelfSSL, and SSL was working on Default Website. I even installed SBS2003 (which has Exchange), ran SelfSSL, and SSL work working immediately. This is all default installation. Thus I believe the most likely cause of failure is user-lockdown of arbitrary server settings that breaks things. -- Show quoteHide quote//David IIS http://blogs.msdn.com/David.Wang This posting is provided "AS IS" with no warranties, and confers no rights. // "Joshua Bright" <JoshuaBri***@discussions.microsoft.com> wrote in message news:8FAB186C-F59C-4D4A-A5DD-56F18AAF7D62@microsoft.com... > Environment: > > Windows 2003 SP1 > Exchange 2003 SP2 > > > Problem: > > I'm trying to install a SSL certificate for OWA (default site). I've used > SelfSSL out of the IIS Resource Kit. I installed the certificate through > the > CLI, and went to edit the options under the Directory Security Tab in the > properties of Exchange (under Default Web Site): I was unable to get a > response when I clicked the Edit button. I tried to click the Server > Certificate button with no response as well. In addition, I'm not able to > access OWA with this certificate installed as is. I've uninstalled the > certificate through certificate manager (personal and trusted). When I go > back to the Directory Security Tab I'm unable to get a response from any > of > the buttons (Server Certificate, Edit, or View Certificate). Does anyone > have any ideas on this? I would like to get this up ASAP. Thanks guys! > > Do you have any ideas on how I would go about figuring this out?
Show quoteHide quote "David Wang [Msft]" wrote: > Just running the SelfSSL tool configures everything in IIS and enables SSL > for the Default Web Site. > > If SSL does not work after that, use SSLDiag to diagnose. > http://www.microsoft.com/windowsserver2003/iis/diagnostictools/default.mspx > > I just installed WS03SP1, ran SelfSSL, and SSL was working on Default > Website. I even installed SBS2003 (which has Exchange), ran SelfSSL, and SSL > work working immediately. This is all default installation. Thus I believe > the most likely cause of failure is user-lockdown of arbitrary server > settings that breaks things. > > -- > //David > IIS > http://blogs.msdn.com/David.Wang > This posting is provided "AS IS" with no warranties, and confers no rights. > // > > "Joshua Bright" <JoshuaBri***@discussions.microsoft.com> wrote in message > news:8FAB186C-F59C-4D4A-A5DD-56F18AAF7D62@microsoft.com... > > Environment: > > > > Windows 2003 SP1 > > Exchange 2003 SP2 > > > > > > Problem: > > > > I'm trying to install a SSL certificate for OWA (default site). I've used > > SelfSSL out of the IIS Resource Kit. I installed the certificate through > > the > > CLI, and went to edit the options under the Directory Security Tab in the > > properties of Exchange (under Default Web Site): I was unable to get a > > response when I clicked the Edit button. I tried to click the Server > > Certificate button with no response as well. In addition, I'm not able to > > access OWA with this certificate installed as is. I've uninstalled the > > certificate through certificate manager (personal and trusted). When I go > > back to the Directory Security Tab I'm unable to get a response from any > > of > > the buttons (Server Certificate, Edit, or View Certificate). Does anyone > > have any ideas on this? I would like to get this up ASAP. Thanks guys! > > > > > > > > I suggest running SSLDiag to troubleshoot. URL is in my prior post.
I can only say that you already did more steps than I did to get SSL working on SBS2003. Based on your steps, I do not think you have a Server Certificate installed at all. -- Show quoteHide quote//David IIS http://blogs.msdn.com/David.Wang This posting is provided "AS IS" with no warranties, and confers no rights. // "Joshua Bright" <JoshuaBri***@discussions.microsoft.com> wrote in message news:09805CDD-A7B2-43F4-AE32-30E66382E55A@microsoft.com... > Do you have any ideas on how I would go about figuring this out? > > "David Wang [Msft]" wrote: > >> Just running the SelfSSL tool configures everything in IIS and enables >> SSL >> for the Default Web Site. >> >> If SSL does not work after that, use SSLDiag to diagnose. >> http://www.microsoft.com/windowsserver2003/iis/diagnostictools/default.mspx >> >> I just installed WS03SP1, ran SelfSSL, and SSL was working on Default >> Website. I even installed SBS2003 (which has Exchange), ran SelfSSL, and >> SSL >> work working immediately. This is all default installation. Thus I >> believe >> the most likely cause of failure is user-lockdown of arbitrary server >> settings that breaks things. >> >> -- >> //David >> IIS >> http://blogs.msdn.com/David.Wang >> This posting is provided "AS IS" with no warranties, and confers no >> rights. >> // >> >> "Joshua Bright" <JoshuaBri***@discussions.microsoft.com> wrote in message >> news:8FAB186C-F59C-4D4A-A5DD-56F18AAF7D62@microsoft.com... >> > Environment: >> > >> > Windows 2003 SP1 >> > Exchange 2003 SP2 >> > >> > >> > Problem: >> > >> > I'm trying to install a SSL certificate for OWA (default site). I've >> > used >> > SelfSSL out of the IIS Resource Kit. I installed the certificate >> > through >> > the >> > CLI, and went to edit the options under the Directory Security Tab in >> > the >> > properties of Exchange (under Default Web Site): I was unable to get a >> > response when I clicked the Edit button. I tried to click the Server >> > Certificate button with no response as well. In addition, I'm not able >> > to >> > access OWA with this certificate installed as is. I've uninstalled the >> > certificate through certificate manager (personal and trusted). When I >> > go >> > back to the Directory Security Tab I'm unable to get a response from >> > any >> > of >> > the buttons (Server Certificate, Edit, or View Certificate). Does >> > anyone >> > have any ideas on this? I would like to get this up ASAP. Thanks >> > guys! >> > >> > >> >> >> >> That is true I do not have a certificate installed. The problem that I'm
having is that the certificate wizard is not coming up when I click the button in inetmgr (Right click Default Web Site, Properties, Directory Security). Show quoteHide quote "David Wang [Msft]" wrote: > I suggest running SSLDiag to troubleshoot. URL is in my prior post. > > I can only say that you already did more steps than I did to get SSL working > on SBS2003. Based on your steps, I do not think you have a Server > Certificate installed at all. > > -- > //David > IIS > http://blogs.msdn.com/David.Wang > This posting is provided "AS IS" with no warranties, and confers no rights. > // > > "Joshua Bright" <JoshuaBri***@discussions.microsoft.com> wrote in message > news:09805CDD-A7B2-43F4-AE32-30E66382E55A@microsoft.com... > > Do you have any ideas on how I would go about figuring this out? > > > > "David Wang [Msft]" wrote: > > > >> Just running the SelfSSL tool configures everything in IIS and enables > >> SSL > >> for the Default Web Site. > >> > >> If SSL does not work after that, use SSLDiag to diagnose. > >> http://www.microsoft.com/windowsserver2003/iis/diagnostictools/default.mspx > >> > >> I just installed WS03SP1, ran SelfSSL, and SSL was working on Default > >> Website. I even installed SBS2003 (which has Exchange), ran SelfSSL, and > >> SSL > >> work working immediately. This is all default installation. Thus I > >> believe > >> the most likely cause of failure is user-lockdown of arbitrary server > >> settings that breaks things. > >> > >> -- > >> //David > >> IIS > >> http://blogs.msdn.com/David.Wang > >> This posting is provided "AS IS" with no warranties, and confers no > >> rights. > >> // > >> > >> "Joshua Bright" <JoshuaBri***@discussions.microsoft.com> wrote in message > >> news:8FAB186C-F59C-4D4A-A5DD-56F18AAF7D62@microsoft.com... > >> > Environment: > >> > > >> > Windows 2003 SP1 > >> > Exchange 2003 SP2 > >> > > >> > > >> > Problem: > >> > > >> > I'm trying to install a SSL certificate for OWA (default site). I've > >> > used > >> > SelfSSL out of the IIS Resource Kit. I installed the certificate > >> > through > >> > the > >> > CLI, and went to edit the options under the Directory Security Tab in > >> > the > >> > properties of Exchange (under Default Web Site): I was unable to get a > >> > response when I clicked the Edit button. I tried to click the Server > >> > Certificate button with no response as well. In addition, I'm not able > >> > to > >> > access OWA with this certificate installed as is. I've uninstalled the > >> > certificate through certificate manager (personal and trusted). When I > >> > go > >> > back to the Directory Security Tab I'm unable to get a response from > >> > any > >> > of > >> > the buttons (Server Certificate, Edit, or View Certificate). Does > >> > anyone > >> > have any ideas on this? I would like to get this up ASAP. Thanks > >> > guys! > >> > > >> > > >> > >> > >> > >> > > > > >
IUSR problem
One-way trust, Kerberos & IIS Self signed standalone CA gives: "Windows does not have enough information to verify this certificat SSL redirects to other SSL PORT 80 ALWAYS IS CLOSED. IIS using old SSL Certificate Question: Security concerns enabling iisadmpwd for PWD change? disabling ssl v2.0 How to provide IIS to Developers server security testing apps |
|||||||||||||||||||||||