0
votes
1answer
30 views

Page can't be displayed with IIS and SSL

I have a single site hosted in IIS 8. I have two site bindings. One is for HTTP, the other is for HTTPS. HTTP is on port 80 with All Unassigned addresses, I left host name blank. HTTPS is on port 443 ...
1
vote
1answer
29 views

Is basic authentication secure when it goes though my reverse proxy on SSL?

Hoping someone can let me know if im on the right track. I use IIS on my file server within my network. I have an apache2 server which takes all HTTP and HTTPS requests and by way of reverse proxy ...
0
votes
0answers
19 views

ASP.Net Developer

We’ve created a web service using C# .Net, Framework 2.0, and are hosting it on a Windows 2008 R2 box using IIS 7.5. The site on which the web service resides is an extranet site using SSL. The SSL ...
0
votes
1answer
40 views

cannot access ssl-secured website on the server side

I am having problems accessing a website, that recentely got SSL-security, on the server side. Accessing the website like normal is not a problem, but when I try to open the website on the server ...
1
vote
1answer
53 views

Is it “safe” to use IIS for HTTPS?

I am trying to setup HTTPS in IIS (Windows Server 2008 R2 and Windows Server 2012) as secure as possible. In order to mitigate attacks such as BEAST and weakness of RC4, while trying to use ECDHE ...
0
votes
0answers
66 views

IIS/OWA is not handling new SSL Certificate

I recently created a new SSL Certificate and self-signed it via this tutorial. The new certificate showed up in the list of certificates. I then assigned IMAP, POP, SMTP & IIS to the ...
1
vote
0answers
51 views

SNI and wildcard SSL certificates on the same server with IIS

I'd like to host a website that should listen to subdomains (e.g. sub.domain.com) together with multiple websites that live just under a second-level domain (e.g. domain2.com, domain3.com) with IIS ...
0
votes
1answer
115 views

IIS URL Rewrite and Reverse Proxy

I have a reverse proxy rule that forwards all requests to a specific subdomain to an internal server and everything works great. <rule name="cloud.domain.com" enabled="true" ...
0
votes
0answers
54 views

Two Way SSL authentication - Generating a certificate request for a web service client

I am in the process of developing a client for a web service that requires Two Way SSL Authentication. My client will be a Windows Service that calls a remote webservice belonging to an external ...
0
votes
0answers
40 views

HTTPS address still resolving (to default site) when no longer in IIS and new certificate installed

I have been banging my head with this and I'm hoping its just something silly. We have changed domains and SSL certificates for 2 sites. I have removed the old certificate and removed the IIS bindings ...
0
votes
1answer
64 views

Enable SSL for “Sub-Application” in IIS 8

I have a website in IIS 8 that has several applications nested under it. So: example.com | ---app1 | ---app2 example.com has both an http binding on port 80 and an SSL binding on ...
0
votes
0answers
42 views

IIS blocking out 2 way SSL cert to Weblogic

We have a IIS server accepting requests on a public IP. IIS forwards the requests over to a Weblogic server. However when we have a client who is passing the cert (to make 2 way SSL work), IIS seems ...
1
vote
1answer
79 views

How to benchmark SSL performance IIS

We are moving from Windows 2003 IIS 6 to Windows 2012 IIS 8. When moving over to the 2012 we have seen a slow down of the website of at least 10 times and sometimes more under load. Initial testing ...
1
vote
3answers
622 views

Chrome displays SSL error due to use of .local top level domain

I just replaced the SSL cert on a few of our servers (all hosted on IIS7). At the suggestion of our IT manager, we're using a Subject Alternative Name certificate instead of individual certs ...
1
vote
0answers
117 views

(Chrome/IE) 502.3 error encountered when POST-ing a file to an SSL-enabled IIS server running ARR that routes to JBoss

I am trying to get a file upload function to work on my site. It basically POSTs an image + image_id to the server. The server is running IIS7 with ARR. I have JBoss AS 7 running in the server as ...
0
votes
1answer
288 views

Import an SSL Certificate into IIS 7 from the command line

I have an SSL Certificate which has been exported into a PFX file. How can I import this file into an IIS 7 instace from the command line? I do not want to bind it against a specific site, just ...
0
votes
1answer
221 views

WD Sentinel DX 4000 Remote Web Access requires port blocked by ISP. Is it possible to change the default ports?

WD Sentinel DX 4000 Remote Web Access requires port blocked by ISP. Is it possible to change the default ports? The ports required are 80 for HTTP, and 443 for HTTPS. I can RDP into the server ...
0
votes
1answer
531 views

process for replacing old SSL certificate on IIS 6?

Tomorrow SSL certificate for my web site will be expired, I was wondering should I replace new certificate with old one now or should wait for old one to be expired ? I don't want visitors to visit my ...
0
votes
0answers
167 views

Using IIS 7.5 as proxy for weblogic with SSL for both endpoints

How can I configure IIS 7.5 to serve as the proxy server for an application running on WebLogic 10 configured to use SSL too (this is mandatory). I have tried to use a pem, cert and others formats to ...
0
votes
1answer
259 views

How to change default listening port on webbserver IIS 7?

How do you change the default port to which the webbserver IIS 7 is listening for incoming traffic to whatever portnumber? e.g. I have web application named "mywebapplication" published on SSL port ...
0
votes
2answers
142 views

All HTTPS traffic redirecting to one IIS site

We have two sites/applications in IIS: www.corpsite.com accounts.corpsite.com As you can see the accounts app has the same TLD and is the only application/site on the server that makes use of an ...
-3
votes
1answer
58 views

Installing SSL on IIS [closed]

Sorry for the newbie question, but I am having trouble trying to install an SSL onto an IIS server. When I purchased my certificate, the provider gave me 3 text files. The files contain the following: ...
0
votes
1answer
138 views

how to install 2 simple ssl certificates on 2 web site having the same ip, in iis8?

how to add a second ssl certificate to the same server for two different web sites?. How to setup a second ip for the second web site considering that the server is balanced? more information: i've ...
0
votes
2answers
496 views

Nessus Security Vulnability Fix: SSL Version 2 (v2) Protocol Detection

Below, in quotes, is a medium severity issue discovered after scanning an IIS web server, with a tool called Nessus. "Consult the application's documentation to disable SSL 2.0 and use SSL 3.0, TLS ...
3
votes
0answers
420 views

Trouble passing Trustwave PCI Scan due to BEAST vulnerability

I'm at my wits end with this one! I am not a CI/networking person to begin with, and so I apologize if I am asking the wrong question/giving the wrong information. I am working on trying to get a ...
0
votes
0answers
98 views

Allow IIS 7.5 access to certificates private key at Windows 2008 R2 x64

all I'm trying to allow my IIS application get access to private key in personal storage of local computer. For this I open MMC, go to certificate, make right click on it and select 'All tasks' -> ...
2
votes
1answer
905 views

What determines the combination of ciphers available on an SSL server?

I have a site that has been bound to a new SSL certificate with SAN (4 additional names). The certificate has a 2048-bit key. The problem is that it works on some browser/OS combinations but not on ...
-2
votes
1answer
165 views

IIS - https:// works while http://host:443 doesn't

This is my site: http://scyk.pl When you go https://scyk.pl Everything is ok, but when you go http://scyk.pl:443 Connection is timing out. I am running IIS7, today I configured ssl, and I ...
0
votes
2answers
260 views

What steps i need to configure ssl on haproxy/iis

I have two web server and one haproxy load balancer in front of them. I want to setup ssl connection for my login page. Can someone give me life cycle steps what i need to do? Can i make this with ...
-1
votes
1answer
1k views

SharePoint 2013, Server 2012, IIS IP Address binding generates 404

I recently have been trying to set up SSL in SharePoint 2013. It has been working just fine using a wildcard cert, host headers, and binding to All Unassigned. However, I now have a need for another ...
0
votes
1answer
184 views

IIS7 SSL certificate caching

I changed certificate in IIS 7, changed bindings on websites, everything OK. But when I'm trying to set my old certificate (and I'm changed bindings too), I still get new certificate instead of old. I ...
2
votes
2answers
111 views

Wildcard SSL cert installation on IIS7

My wildcard cert (using SSL.com cert) has subject *.site.com, but for some reason it only works on the first site it's installed on and not the other sites on the server. Those other sites just point ...
0
votes
1answer
29 views

Can I use SSL cert to encrypt SAML2 responses?

We have a website hosted in IIS 7.5, say www.example.com, and we purchased an SSL cert for it. Now we would like to implement SAML2.0 in some of the responses. Is it possible to use our existing SSL ...
1
vote
1answer
152 views

What are some easy tips for accelerating SSL when using IIS?

This evening while perusing Hacker News I came upon a post with the title 5 easy tips to accelerate SSL. An interesting read, but I don't use Apache or Nginx and am instead interested in similar tips ...
0
votes
1answer
77 views

SSL certificate error after issuing new certificate to same entity with different Friendly Name

I am working on a system that calls a webservice from a client application. The SSL certificate expired on the server (Windows Server 2008 with IIS) that hosts the webservice. A new SSL certificate ...
6
votes
3answers
8k views

Installing SSL on a Windows Server 2012 with IIS 8.0

We are in the process of moving a website from a machine with Windows Server 2008 R2/IIS 7.5 to a machine with Windows Server 2012/IIS 8.0 as we want to take advantage of the new SNI feature. This ...
2
votes
2answers
373 views

IIS reverse proxy

I am trying to setup a Windows 8 box as a "reverse proxy" web server using IIS. My goal is as simple as it gets. I do not need subdomains to go to different servers, but rather to redirect all ...
0
votes
1answer
207 views

Reverse Proxy Server SSL?

Context We currently have an Apache web server in the DMZ set up as a reverse proxy and load balancer for two machines running Windows Server 2008 (IIS) inside. The Apache server has a genuine SSL ...
0
votes
1answer
132 views

Monitor outbound SSL traffic

We have an old application that worked for years, and recently a provider who supplies data for this application changed something on there end. Needless to say they say they say its not a problem on ...
1
vote
0answers
146 views

Modifying Authentication on web application / service in IIS(7/.5) via Powershell

I am trying to install a wcf-servce by using New-WebApplication in powershell. It works fine. However, how can I Modify the Authentication? I want to enable Anonymous Access Authentication and disable ...
1
vote
0answers
57 views

require client certificates in IIS without requiring SSL

In IIS 7, I've created an https binding for a site, and I'd like to require client certificates for https and still keep my http endpoint. That is to say, I'd like to require client certificates for ...
0
votes
1answer
82 views

where did i go wrong when setting up ssl?

I needed my site to be able to do https, however after I set it up on my server https://www.mysite.com/ says it is secure, but no page can be found. It shows the little green lock and everything. ...
1
vote
0answers
106 views

Generating client certificates for IIS webapp

I am trying to figure out how to set up my web application so that only clients (external) with issued certificates could access it. (on Windows7) I have followd this tutorial where i got a .CER and ...
0
votes
1answer
109 views

IIS SSL is taking all IPs although it is told not to

I have a testing system where IIS Express on Windows 7 SSL website has to live together with Cerberus FTP server SSL website (Cerberus FTP has a built-in web server for HTTP uploads). I have set up ...
0
votes
2answers
2k views

How do I import certificate (.CER) in IIS

I have created certificates based on this tutorial: http://ondrej.wordpress.com/2010/01/24/iis-7-and-client-certificates/ Then I have imported "MyPersonalCA.cer" on IIS host server based on this ...
1
vote
1answer
409 views

How can I encrypt certain pages with SSL (HTTPS) using IIS7.5, AJP Connector (1.3), and Apache Tomcat 5.5?

I have a Windows Server 2008 R2 Box with IIS 7.5 and Apache Tomcat 5.5. JSP traffic is routed from IIS to Tomcat via the AJP Connector version 1.3. This connector uses an isapi filter in IIS to ...
1
vote
1answer
230 views

What are some steps to trouble shoot denied HTTPS requests in IIS 7?

I'm hosting a site in IIS 7 that's using a wildcard certificate from RapidSSL. To date there's been no issues of people not being able to connect to the site with SSL. Now we have a client who can't ...
1
vote
2answers
195 views

what would need to change on IIS for SSL Enabled SQL server

I have IIS set with windows intergrated security, the intranet c# web application connects database with trust connection. Everything works fine until we enabled SSL on the database (Sql server 2008), ...
5
votes
4answers
3k views

Can I use Active Directory as a CA for creating test SSL certificates for IIS?

We have an internal test version of our website, which is available (via internal DNS zones) as www.mysite.com.test I'd like to create an SSL certificate for www.mysite.com.test, so that our testers ...
0
votes
2answers
152 views

Installing a Certificate in IIS 7

I have created a free certificate from https://www.startssl.com. It asked me to export that certificate on the disk. Now i want to install this certificate in IIS 7 on my webserver. How do i do that. ...