0
votes
0answers
9 views

Select existing SSL certificate for a domain in Plesk

I added a new SSL certificate in Plesk -> Tools & Settings -> SSL Certificates and now want to link an existing domain to it. However, on domain SSL Certificates page, the only option ...
10
votes
6answers
10k views

On IIS, how do I patch the SSL 3.0 POODLE vulnerability (CVE­-2014­-3566)?

How do I patch CVE­-2014­-3566 on a Windows Server 2012 system running IIS? Is there a patch in Windows Update, or do I have to do a registry change to disable SSL 3.0?
0
votes
0answers
22 views

Configuring client certificates on IIS8 - Error 403.16

I am trying to implement client certificate authentication on IIS 8. I have deployed my configuration on a development machine and verified it working as expected there. However after setting up on ...
0
votes
0answers
11 views

IIS routes to wrong https site

We are running a Microsoft Server 2008 R2 with 2 IP addresses: .1 .2 and IIS 7.5 as the webserver. On this server there is a website configures to use the domain A.Company.com on port 80 with IP ...
0
votes
1answer
23 views

Intermediate certificate not sent to clients? [duplicate]

I have installed intermediate certificate on server according to all tutorials for IIS, that is: "Certificates MMC snap-in, you choose computer store, you'll have the option to place the intermediate ...
0
votes
2answers
44 views

Redirect user from HTTP to HTTPS in IIS

I have a virtual machine with a Windows Server 2012 running in a Windows 8 host. The host redirects all http traffic to port 81 to port 80 of the server and there I have an IIS web server. What I'm ...
3
votes
1answer
104 views

New gTLD Chrome SSL Certificate errors

We've recently acquired a new .Care domain and are attempting to install a SSL certificate. Whilst FF and IE are perfectly happy with the certificate - both display the padlock, Chrome is not and ...
0
votes
2answers
85 views

SSL Mismatched Address Certificate Error on IIS 7

We have a local application server (trisha0002), and on this server we have an application (FlexibleBenefits). When we install SSL for this application, it gives Mismatched Address. What can be the ...
1
vote
1answer
102 views

Configuring SSL through IIS on an AWS EC2 Windows instance

I am trying to enable HTTPS connections to a website hosted through IIS on an Amazon EC2 instance. The instance is running Windows Server 2012. I do not have a wildcard certificate. The EC2 instance ...
0
votes
1answer
106 views

Connection Reset error trying to set up HTTPS locally using VS and IIS Express

I'm trying to set up Facebook authentication on my application, so I tried following the steps at this page: ...
0
votes
0answers
61 views

IIS 6.0 SMTP Relay mail to other mail server through SSL port 465

May i know iis smtp relay can/can't support to mail server (Zimbra) through SSL (Port 465). i just can see the check box of TLS encryption, pls help, thanks a lot. SMTP Relay Version Internet ...
0
votes
1answer
765 views

Page can't be displayed with IIS and SSL

I have a single site hosted in IIS 8. I have two site bindings. One is for HTTP, the other is for HTTPS. HTTP is on port 80 with All Unassigned addresses, I left host name blank. HTTPS is on port 443 ...
1
vote
1answer
59 views

Is basic authentication secure when it goes though my reverse proxy on SSL?

Hoping someone can let me know if im on the right track. I use IIS on my file server within my network. I have an apache2 server which takes all HTTP and HTTPS requests and by way of reverse proxy ...
0
votes
0answers
23 views

ASP.Net Developer

We’ve created a web service using C# .Net, Framework 2.0, and are hosting it on a Windows 2008 R2 box using IIS 7.5. The site on which the web service resides is an extranet site using SSL. The SSL ...
0
votes
1answer
62 views

cannot access ssl-secured website on the server side

I am having problems accessing a website, that recentely got SSL-security, on the server side. Accessing the website like normal is not a problem, but when I try to open the website on the server ...
1
vote
1answer
56 views

Is it “safe” to use IIS for HTTPS?

I am trying to setup HTTPS in IIS (Windows Server 2008 R2 and Windows Server 2012) as secure as possible. In order to mitigate attacks such as BEAST and weakness of RC4, while trying to use ECDHE ...
0
votes
0answers
102 views

IIS/OWA is not handling new SSL Certificate

I recently created a new SSL Certificate and self-signed it via this tutorial. The new certificate showed up in the list of certificates. I then assigned IMAP, POP, SMTP & IIS to the ...
4
votes
1answer
194 views

SNI and wildcard SSL certificates on the same server with IIS

I'd like to host a website that should listen to subdomains (e.g. sub.domain.com) together with multiple websites that live just under a second-level domain (e.g. domain2.com, domain3.com) with IIS ...
0
votes
1answer
488 views

IIS URL Rewrite and Reverse Proxy

I have a reverse proxy rule that forwards all requests to a specific subdomain to an internal server and everything works great. <rule name="cloud.domain.com" enabled="true" ...
0
votes
0answers
89 views

Two Way SSL authentication - Generating a certificate request for a web service client

I am in the process of developing a client for a web service that requires Two Way SSL Authentication. My client will be a Windows Service that calls a remote webservice belonging to an external ...
0
votes
0answers
45 views

HTTPS address still resolving (to default site) when no longer in IIS and new certificate installed

I have been banging my head with this and I'm hoping its just something silly. We have changed domains and SSL certificates for 2 sites. I have removed the old certificate and removed the IIS bindings ...
0
votes
1answer
91 views

Enable SSL for “Sub-Application” in IIS 8

I have a website in IIS 8 that has several applications nested under it. So: example.com | ---app1 | ---app2 example.com has both an http binding on port 80 and an SSL binding on ...
0
votes
0answers
67 views

IIS blocking out 2 way SSL cert to Weblogic

We have a IIS server accepting requests on a public IP. IIS forwards the requests over to a Weblogic server. However when we have a client who is passing the cert (to make 2 way SSL work), IIS seems ...
1
vote
1answer
119 views

How to benchmark SSL performance IIS

We are moving from Windows 2003 IIS 6 to Windows 2012 IIS 8. When moving over to the 2012 we have seen a slow down of the website of at least 10 times and sometimes more under load. Initial testing ...
1
vote
3answers
893 views

Chrome displays SSL error due to use of .local top level domain

I just replaced the SSL cert on a few of our servers (all hosted on IIS7). At the suggestion of our IT manager, we're using a Subject Alternative Name certificate instead of individual certs ...
1
vote
0answers
144 views

(Chrome/IE) 502.3 error encountered when POST-ing a file to an SSL-enabled IIS server running ARR that routes to JBoss

I am trying to get a file upload function to work on my site. It basically POSTs an image + image_id to the server. The server is running IIS7 with ARR. I have JBoss AS 7 running in the server as ...
0
votes
1answer
579 views

Import an SSL Certificate into IIS 7 from the command line

I have an SSL Certificate which has been exported into a PFX file. How can I import this file into an IIS 7 instace from the command line? I do not want to bind it against a specific site, just ...
0
votes
1answer
316 views

WD Sentinel DX 4000 Remote Web Access requires port blocked by ISP. Is it possible to change the default ports?

WD Sentinel DX 4000 Remote Web Access requires port blocked by ISP. Is it possible to change the default ports? The ports required are 80 for HTTP, and 443 for HTTPS. I can RDP into the server ...
0
votes
1answer
1k views

process for replacing old SSL certificate on IIS 6?

Tomorrow SSL certificate for my web site will be expired, I was wondering should I replace new certificate with old one now or should wait for old one to be expired ? I don't want visitors to visit my ...
0
votes
1answer
457 views

How to change default listening port on webbserver IIS 7?

How do you change the default port to which the webbserver IIS 7 is listening for incoming traffic to whatever portnumber? e.g. I have web application named "mywebapplication" published on SSL port ...
0
votes
2answers
207 views

All HTTPS traffic redirecting to one IIS site

We have two sites/applications in IIS: www.corpsite.com accounts.corpsite.com As you can see the accounts app has the same TLD and is the only application/site on the server that makes use of an ...
-3
votes
1answer
65 views

Installing SSL on IIS [closed]

Sorry for the newbie question, but I am having trouble trying to install an SSL onto an IIS server. When I purchased my certificate, the provider gave me 3 text files. The files contain the following: ...
0
votes
1answer
182 views

how to install 2 simple ssl certificates on 2 web site having the same ip, in iis8?

how to add a second ssl certificate to the same server for two different web sites?. How to setup a second ip for the second web site considering that the server is balanced? more information: i've ...
0
votes
2answers
665 views

Nessus Security Vulnability Fix: SSL Version 2 (v2) Protocol Detection

Below, in quotes, is a medium severity issue discovered after scanning an IIS web server, with a tool called Nessus. "Consult the application's documentation to disable SSL 2.0 and use SSL 3.0, TLS ...
3
votes
1answer
528 views

Trouble passing Trustwave PCI Scan due to BEAST vulnerability

I'm at my wits end with this one! I am not a CI/networking person to begin with, and so I apologize if I am asking the wrong question/giving the wrong information. I am working on trying to get a ...
0
votes
0answers
137 views

Allow IIS 7.5 access to certificates private key at Windows 2008 R2 x64

all I'm trying to allow my IIS application get access to private key in personal storage of local computer. For this I open MMC, go to certificate, make right click on it and select 'All tasks' -> ...
2
votes
1answer
1k views

What determines the combination of ciphers available on an SSL server?

I have a site that has been bound to a new SSL certificate with SAN (4 additional names). The certificate has a 2048-bit key. The problem is that it works on some browser/OS combinations but not on ...
-2
votes
1answer
209 views

IIS - https:// works while http://host:443 doesn't

This is my site: http://scyk.pl When you go https://scyk.pl Everything is ok, but when you go http://scyk.pl:443 Connection is timing out. I am running IIS7, today I configured ssl, and I ...
0
votes
2answers
299 views

What steps i need to configure ssl on haproxy/iis

I have two web server and one haproxy load balancer in front of them. I want to setup ssl connection for my login page. Can someone give me life cycle steps what i need to do? Can i make this with ...
-1
votes
1answer
2k views

SharePoint 2013, Server 2012, IIS IP Address binding generates 404

I recently have been trying to set up SSL in SharePoint 2013. It has been working just fine using a wildcard cert, host headers, and binding to All Unassigned. However, I now have a need for another ...
0
votes
1answer
260 views

IIS7 SSL certificate caching

I changed certificate in IIS 7, changed bindings on websites, everything OK. But when I'm trying to set my old certificate (and I'm changed bindings too), I still get new certificate instead of old. I ...
2
votes
2answers
123 views

Wildcard SSL cert installation on IIS7

My wildcard cert (using SSL.com cert) has subject *.site.com, but for some reason it only works on the first site it's installed on and not the other sites on the server. Those other sites just point ...
0
votes
1answer
32 views

Can I use SSL cert to encrypt SAML2 responses?

We have a website hosted in IIS 7.5, say www.example.com, and we purchased an SSL cert for it. Now we would like to implement SAML2.0 in some of the responses. Is it possible to use our existing SSL ...
1
vote
1answer
218 views

What are some easy tips for accelerating SSL when using IIS?

This evening while perusing Hacker News I came upon a post with the title 5 easy tips to accelerate SSL. An interesting read, but I don't use Apache or Nginx and am instead interested in similar tips ...
0
votes
1answer
82 views

SSL certificate error after issuing new certificate to same entity with different Friendly Name

I am working on a system that calls a webservice from a client application. The SSL certificate expired on the server (Windows Server 2008 with IIS) that hosts the webservice. A new SSL certificate ...
7
votes
3answers
12k views

Installing SSL on a Windows Server 2012 with IIS 8.0

We are in the process of moving a website from a machine with Windows Server 2008 R2/IIS 7.5 to a machine with Windows Server 2012/IIS 8.0 as we want to take advantage of the new SNI feature. This ...
2
votes
2answers
398 views

IIS reverse proxy

I am trying to setup a Windows 8 box as a "reverse proxy" web server using IIS. My goal is as simple as it gets. I do not need subdomains to go to different servers, but rather to redirect all ...
0
votes
1answer
213 views

Reverse Proxy Server SSL?

Context We currently have an Apache web server in the DMZ set up as a reverse proxy and load balancer for two machines running Windows Server 2008 (IIS) inside. The Apache server has a genuine SSL ...
0
votes
1answer
140 views

Monitor outbound SSL traffic

We have an old application that worked for years, and recently a provider who supplies data for this application changed something on there end. Needless to say they say they say its not a problem on ...
1
vote
0answers
150 views

Modifying Authentication on web application / service in IIS(7/.5) via Powershell

I am trying to install a wcf-servce by using New-WebApplication in powershell. It works fine. However, how can I Modify the Authentication? I want to enable Anonymous Access Authentication and disable ...