1
vote
1answer
77 views

How to benchmark SSL performance IIS

We are moving from Windows 2003 IIS 6 to Windows 2012 IIS 8. When moving over to the 2012 we have seen a slow down of the website of at least 10 times and sometimes more under load. Initial testing ...
0
votes
1answer
524 views

process for replacing old SSL certificate on IIS 6?

Tomorrow SSL certificate for my web site will be expired, I was wondering should I replace new certificate with old one now or should wait for old one to be expired ? I don't want visitors to visit my ...
1
vote
1answer
34 views

IIS 6.0 SSL Certificate

I have this issue with one of our websites. I recently purchased and updated and SSL certificate, installed on our server, running IIS 6.0: Now, every time someone goes to our site, we get this ...
0
votes
0answers
191 views

Installing SSL certificates in IIS 6.2

I'm having some trouble adding certificates to the server in IIS. I have four .pem files a .jks file and a .pfx file. I have tried importing them into MMC but they do not appear in the list of ...
0
votes
1answer
47 views

Non-https sites accessible over https

We have a couple of https only sites on our server, these have redirects set up to send any http request to the https address. However we have an issue where our http only site addresses accessed over ...
5
votes
1answer
475 views

IIS 6.0 mitigating BEAST

Recently, my PCI assessor informed me that my servers are vulnerable to BEAST and failed me. I did my homework and I want to change our webservers to prefer RC4 ciphers over CBC. I followed every ...
0
votes
2answers
140 views

IIS6 Single site multiple domains - some SSL, some unique IP

Is it possible to have a single site in IIS6, with multiple domains (not subdomains) some domains using SSL? The domains with SSL using a unique IP. I've read similar situations, but nothing exactly ...
0
votes
1answer
82 views

where did i go wrong when setting up ssl?

I needed my site to be able to do https, however after I set it up on my server https://www.mysite.com/ says it is secure, but no page can be found. It shows the little green lock and everything. ...
1
vote
1answer
412 views

Installing crt certificate without CSR on IIS6

I renewed an ssl certificate on GoDaddy recently. It didn't ask me to generate a new CSR. It just gave me a .crt file. How do I install this in IIS6. I already removed the expired certificate and ...
0
votes
1answer
362 views

Removed SSL Cert: Need to redirect HTTPS to HTTP - IIS6

I'm running on a Windows 2K3 server with IIS 6. Due to some issues, I'd like to remove the SSL binding, and have traffic redirected to HTTP. Where this becomes a problem, when a client tries to ...
1
vote
2answers
414 views

MS IIS6,self signed ssl installed successfully, but https doesn't work

I follow the link below to install self signed ssl on window server 2003, IIS 6. ...
2
votes
1answer
202 views

How can I verify a client's identity using an SSL handshake to allow access to certain website pages?

I'm a programmer in the process of writing Web Services on a website for a specific client. These Web Service can only be accessed by this one client. They intend to send a client certificate over SSL ...
1
vote
1answer
100 views

SelfSSL in IIS 6.0

I am using IIS 6.0 and selfSSL to create a self signed certificate, but it only lasts one week. How do I prolong the time of this?
1
vote
2answers
270 views

Images on IIS server not keeping HTTPS protocol

When using an HTTPS connection we are receiving the following warning: "Your connection is encrypted with 128-bit encryption. However, this page includes other resources which are not secure." ...
0
votes
0answers
69 views

https being forwarded to http

My website is supposed to be running over ssl. However, this has recently broken for some of the pages - if the user types in https://xx.com, they get forwarded to http://xx.com. I think this must be ...
1
vote
2answers
835 views

How to disable SSL in IIS6

So I have a server that was used by someone else to run the same website for a while. At some point, the previous developers installed an SSL certificate that expired in 7 days. When I came in, I ...
0
votes
1answer
1k views

getting HTTP Error 403.7 - Forbidden: SSL client certificate is required

-1 down vote favorite Created a CA using: makecert -r -pe -n CN=WingCA -sr CurrentUser -a sha1 -sky signature -cy authority -sv WingCA.pvk WingCA.cer imported it to root: certmgr -add -all -c ...
0
votes
1answer
117 views

Configure the Web Application to Require Client Certificates

I created a SelfSigned certificate for the webserver using selfssl. installed it on trusted root and personal. cretaed a selfsigned certificate for the client from clients machine, installed it on ...
0
votes
1answer
663 views

Self-Signed Certificate and IIS 6.0, How to generate a Client Certificate

I am looking at generating a self-signed certificate, and only allow users who has client certificate installed on my web server. I am using IIS 6.0 with selfSSL to generate my .pfx web server ...
0
votes
1answer
58 views

controlling SSL at page level in IIS

For various reason I would like to turn off SSL at a page level. Is this best practice? What should I look out for while I am doing this? What is considered the safest way to do this? The way I was ...
0
votes
1answer
68 views

One IIS server, multiple domains with SSL, one not working

i have a webserver IIS 6.0. I have multiple domains running, some of them with SSL. All of a sudden, one of my domains with SSL is timing out. When i call it http is runs fine. I am very confused ...
2
votes
1answer
1k views

How do I configure SSL on IIS 6.0 FTP Server?

I am using IIS 6 FTP server for the exchange of files through System.Net.FtpWebRequest. I want to configure SSL on IIS 6.0's FTP server so that it will allow secure connections. Is this possible, if ...
1
vote
2answers
1k views

Redirect https://olddomain.com to https://newdomain.com in IIS6

What is the easiest way for me to redirect both http and https from olddomain.com to newdomain.com regardless of invalid certificate warnings? newdomain.com is our current domain on IIS6 and has SSL ...
0
votes
1answer
252 views

Why does my IIS6 web server return a 301-moved permanently when it receives a https request?

I did not set the server up so there is probably a setting that I'm missing. My server has a SSL cert installed and it appears to be configured to accept secure connections. However, whenever a https ...
0
votes
2answers
777 views

aspx transfer is slow with IE7, IIS6 and HTTP (SSL and/or IIS7 is fast?)

First of all: I'm really confused about this problem so excuse me if the description below is vague. My site is written in .NET4, ASP.NET WebForms and runs in different environments, some are IIS6, ...
1
vote
1answer
119 views

IIS6 hosts another site when going to https and the site doesn't have SSL

I've got a handful of sites on a windows 2003 IIS 6 box. Many of the sites are configured using host name header. A few of the sites have their own IP addresses, and have SSL certificates installed. ...
1
vote
3answers
538 views

Multiple IIS SSL sites behind a NAT router

I have a single IIS 6 box (Win2k3 SP2) that I host multiple development websites on. I have one site currently that requires SSL and now I'm adding a second site. The first site is bound to the ...
0
votes
2answers
301 views

Multiple IPs on single server, some SSL, and SVN throwing a wrench into things

We've got two sites with two IPs using only port 80, and an SVN repository using 443 on one of those IPs. When I try to set up SSL for one of the two sites (with the IP that is not in being used by ...
0
votes
1answer
1k views

SSL connection error for only one site (of many) on server

I have a server running many websites, each with SSL. One of the sites is now refusing connections over SSL. This was previously working and I'm looking for assistance in determining what has been ...
0
votes
1answer
252 views

Install/import SSL certificate on Windows Server 2003/IIS 6.0

A couple of months ago we ordered an SSL certificate for a client's server using the request guide in IIS 6.0. This worked fine and the guide was completed when we received the certificate. But about ...
0
votes
1answer
1k views

IIRF - Redirecting all traffic to the http equivalent

I'm using IIRF and having some trouble getting it to redirect all traffic to the secure version of my sites. So... I have a website with about 20 apps in virtual directories in IIS6. The website ...
1
vote
2answers
2k views

Installing a certificate without the CSR's originating website in IIS 6

It seems the common method for installing a new SSL certificate for a site on IIS 6 is to create a temporary site, generate a CSR with the parameters of the real site, and then fulfill that CSR when ...
4
votes
1answer
1k views

SSL enabled webpage does not prompt for client certificate

Summary: We have two different Windows Server + II6 environments that are SSL enabled. Where one behaves the way we want and the other does not. Server Configurations: Windows Server 2003 SP2 IIS ...
0
votes
2answers
200 views

Installing Exchange 2003 IIS certificate

I'm having a bit of problem. I've went and registered new certificate for my domain mail.company.com at StartCom. This is free one year certificate. I've created it from scratch on website and haven't ...
0
votes
3answers
234 views

Server Leaks Internal IP Address through content-location on port 443

I have 2 servers doing this that use https. I was getting this on both port 80 and 443 but I followed the instructions on http://support.microsoft.com/kb/834141/ and resolved the issue with 80. I am ...
0
votes
1answer
621 views

Replacing IIS6 ssl cert with new one without downtime

I found this question and it sounds like my solution, but on my IIS server the "Replace the current certificate" option is grayed out. I can't go the route of doing a standard replace because the ...
4
votes
4answers
397 views

SSL and domain with WWW or without WWW

why does my ssl work only for domain.co.il and not for www.domain.co.il is it like i read, that we need to order the SSL twice? and what can be done about it, if this is the truth? how can it be ...
3
votes
1answer
1k views

Issues disabling SSL 2.0 in IIS 6

I have reviewed both related posts on this site: How do I disable SSL 2.0 support on IIS? How to disable SSL 2.0 on IIS 7.5? The issue I am having is that I have implemented the registry change, ...
3
votes
2answers
1k views

My IIS server won't serve SSL sites to some browsers

I've got an IIS 6.0 server that won't serve pages over SSL to some browsers. In Webkit-based browsers on OS X 10.6, I can't load pages at all. In MSIE 8 on Windows XP SP3, I can load pages, but it ...
1
vote
1answer
653 views

IIS 6 getting “Page Not Found” after applying SSL

I am setting up SSL certificates on a development environment using IIS 6 on W2k3. I have a directory called login with a single page login.asp which I would like only viewable over SSL. So before ...
1
vote
2answers
464 views

IIS, SSL, and Virtual Directories

I'm running a webserver on WS 2k3, IIS 6.0. Some of the content is on that server, but most is in a virtual directory linked to another server. Everything works (almost) fine when no SSL is used. ...
0
votes
1answer
327 views

Server with IIS and Apache - how to SSL encrypt Apache with IIS

I have a Windows Server 2003 box already setup and working with IIS 6. IIS is set to serve a site out over both HTTP and HTTPS connections using default ports. For various reasons I need to set ...
1
vote
2answers
674 views

403.4 won't redirect in IE7

I have a secured folder that requires SSL. I have set it up in IIS(6) to require SSL. We don't want the visitors to be greeted with the "must be secure connection" error, so I have modified the 403.4 ...
2
votes
1answer
655 views

What is involved in upgrading from SSL 2.0 to SSL 3.0 in IIS 6?

I am using a site security testing suite and it says SSL 2.0 has known vulnerabilities and I should change it to SSL 3.0. Will my current certificates still work once I switch to SSL 3.0? How do I ...
1
vote
2answers
607 views

Multiple SSL certificates on IIS 6 cluster

I have a 2 machine IIS 6 cluster (Windows 2003 Standard Edition) running a number of sites, only one of them has an SSL certificate. I have a number of IPs available to me on each machine, but the ...
1
vote
2answers
614 views

How can I remove the default host header for SSL requests in IIS6

I have multiple sites setup on IIS 6 with host headers. One of those sites has an SSL certificate installed. So now if any of the non-SSL-enabled sites is requested with https it loads the ...
3
votes
2answers
1k views

Multiple Sites with SSL on IIS6

This may sound a little stupid, but I'm more of a dev guy than a server admin and I am incredibly boneheaded when it comes to IIS. So please bear with me here. I currently have a client that has a ...
1
vote
4answers
3k views

How to enforce/redirect http to https

I've been hosting a domain on a Win2003 server for the last 3 or 4 years but I now need to make this domain accessible only via https. I've installed the certificate correctly and it works fine (the ...
2
votes
1answer
350 views

SSL stopped working on IIS6 after Windows Update

I have a Windows 2003 image with IIS6 installed that just installed a block of Windows Updates. This webserver was using port 443 and an SSL certificate properly up until this patch, and it will no ...
0
votes
4answers
853 views

IIS 6 SSL Restore from PFX without Deleting Pending Request

I requested a new SSL certificate from a certificate authority, but until they process it my site is losing business. Before doing so, I had backed up the original certificate to a PFX file. Now ...