1
vote
2answers
81 views

Importing SSL into Windows Server 2008 - just CER, not PFX

We've recently suffered a server collapse while moving sites from one box to another. The old box was running IIS6 / Windows Server 2003, the new IIS7 / Windows Server 2008. Normally when moving sites ...
0
votes
2answers
494 views

how to unblock my https website when its blocked by a specific country?

I have a website, more like a webservice that serve some applications, my service has been blocked in a specific country, only the https version is blocked. i need to keep using the ssl certificate ...
0
votes
1answer
44 views

Widows server 2008, iis7. Unable to set up SSL for public use. Possible port issue

I have an asp.net mvc website hosted on IIS 7, Windows Server 2008, on Amazon server I think. SSL certificate is set up and when browsing from the server everything works fine(except for the warning ...
0
votes
0answers
51 views

IIS 7: One Page Works, All Others Fail With “Error code: ssl_error_rx_record_too_long”

On my local machine, I have a second site bound to Port 81. Within that site is a certain page which I can browse from other machines with no problems, but all other pages fail with "Error code: ...
0
votes
1answer
275 views

Two ssl certificates on same server with two different IP addresses

I have two Sharepoint web applications running on the same server. We want to use the following IP Address:port configurations: - first site: IP Address: x.x.x.22 port 443 - second site: IP Address: ...
1
vote
1answer
21 views

Running secured and non secured websites on the same IIS7 server

We have a single IIS7 web server serving multiple websites. All the sites have different domain names. One site (I'll call it securedsite.com) is an ecommerce website so we have a SSL certificate for ...
0
votes
0answers
141 views

Safari users unable to connect to website with SSL Certifiacte enabled

We are having issues with our SSL IIS certificate on our site and the ability of Safari browser users being able to access it. Our Web site is hosted on Windows 2008 server with IIS7. Our SSL ...
0
votes
1answer
52 views

how to confirm ssl certificate will take over after intermediate

Sorry, this is probably a dumb question, but just want some assurance... Installed my first SSL certificate on an IIS 7 server and just want to know if there's a way to verify the SSL certificate will ...
1
vote
2answers
77 views

how to CHECK the version of SSL in IIS server 7? [duplicate]

I have disabled SSL 2.0 in IIS server 7. How can I determine which SSL version is enabled in my web server?
0
votes
0answers
111 views

Why does IIS7 on one server work with my certificate while another has problems?

In the setup I describe, we have two servers, Alpha and Bravo. Alpha is a server that has been around for years. It is a Windows 2008 server running IIS7. In order to log in to any application on ...
0
votes
2answers
512 views

Nessus Security Vulnability Fix: SSL Version 2 (v2) Protocol Detection

Below, in quotes, is a medium severity issue discovered after scanning an IIS web server, with a tool called Nessus. "Consult the application's documentation to disable SSL 2.0 and use SSL 3.0, TLS ...
1
vote
1answer
53 views

Prevent HTTP bindings from responding over HTTPS

I currently have a site with multiple HTTP bindings and one HTTPS binding. The cert I'm using for it is specific to one domain (secure.domain.com) and IIS is responding to HTTPS requests over all ...
2
votes
1answer
930 views

What determines the combination of ciphers available on an SSL server?

I have a site that has been bound to a new SSL certificate with SAN (4 additional names). The certificate has a 2048-bit key. The problem is that it works on some browser/OS combinations but not on ...
0
votes
1answer
191 views

IIS7 SSL certificate caching

I changed certificate in IIS 7, changed bindings on websites, everything OK. But when I'm trying to set my old certificate (and I'm changed bindings too), I still get new certificate instead of old. I ...
0
votes
2answers
264 views

can't install SSL certificate in IIs 7

i tried to install SSL certificate in IIS 7 server (windows server 2008). installation of intermediate certificate in windows mmc console was a success, but when i tried to install the certificate in ...
1
vote
0answers
538 views

Securing using SSL multiple web servers behind a single IP address

Background We have number of web servers serving services and pages behind a single IP address we want to use SSL to secure the connection from the clients to those servers. We access the web ...
4
votes
3answers
181 views

Is there a downside to enforcing 128bit SSL for a website

On Windows Server 2008 R2 I can enforce 128bit SSL for a website by executing: appcmd set config "Default Web Site" -section:access -sslFlags:Ssl,Ssl128 -commit:apphost Is there a downside to that? ...
0
votes
2answers
2k views

How do I import certificate (.CER) in IIS

I have created certificates based on this tutorial: http://ondrej.wordpress.com/2010/01/24/iis-7-and-client-certificates/ Then I have imported "MyPersonalCA.cer" on IIS host server based on this ...
0
votes
1answer
129 views

IIS7 SSL Only Works on Local Machine

I have a website in IIS 7 with a self signed certificate. I can navigate to the website on my PC that is hosting it. If I navigate to the specific URL in the self signed certificate, I don't get any ...
0
votes
2answers
152 views

Installing a Certificate in IIS 7

I have created a free certificate from https://www.startssl.com. It asked me to export that certificate on the disk. Now i want to install this certificate in IIS 7 on my webserver. How do i do that. ...
0
votes
2answers
2k views

Server certificate not accepted in Mac Safari OS

We have an IIS 7 server with a wildcard certificate. This should work find if you test it in any browser: https://www.profcoach.nl But when I try to test this in Safari MaxOS Leopard or Lion it ...
3
votes
1answer
319 views

How can two IIS7 domains share SSL port 443 on one IP?

I have two domains: domain1.com and domain2.com. I also have two GoDaddy SSL certificates (one cert for each domain). I only have one IP. I'm running IIS 7 on a Windows Server 2008 R2 standalone ...
3
votes
1answer
304 views

Single IP, Multiple SSL Certs, NOT using wildcard, TLS on IIS 7 possible?

We host many sites with domains on a single IP ie. www.domain1.com, www.domain2.com. We want to secure /admin using SSL. Historically each SSL cert needs a unique IP address. These are small sites and ...
3
votes
1answer
727 views

How to make TLS the preferred secure connection in IIS 7

I have a mvc3 website that is hosted on a Server 2008 r2 server and I have a security certificate installed and all seems to be working ok. However if I connect to the site with Google Chrome, and ...
0
votes
1answer
712 views

Need help converting wildcard CRT to PFX for use with Windows Azure

I need help preparing a wildcard SSL certificate purchased from NetworkSolutions. I called their tech support, and Jason told me "I am unfamiliar with Windows, just google it...". Here is what I ...
1
vote
2answers
187 views

Why is my SSL certificate saying it's not totally secure?

I've just installed a SSL certificate on my web site, but when I view it in my browser (Chrome), the browser warns me that it's not totally secure: What am I doing wrong, and how do I correct it?
0
votes
1answer
126 views

IIS7 SSL Wildcard Certificate

Will a wildcard certificate work with a domain and a subdomain? http://example.com http://sub.example.com Can I setup a wildcard certificate to be used by these two? In the tutorials I have ...
1
vote
2answers
251 views

How to have a certificate which works with both example.com and subdomain.example.com in IIS?

I have an IIS server hosting several websites, like: example.com subdomain1.example.com subdomain2.example.com I want those websites to be able to use SSL. If I install the certificate ...
3
votes
2answers
403 views

Different SSL Certificate Authorities for domains and subdomains?

Our main site www.example.com has a regular VeriSign SSL certificate. However, we need ssl for our dev environment for accurate testing. Is it possible to use another ssl from a different (cheaper) ...
0
votes
2answers
166 views

SSL solution for multi host web portal on IIS 7

My portal is currently work as multiple domain point to same application. abc.com, bce.com, cde.com etc all coming to same server and content created based on host. is there any solution for to use ...
0
votes
1answer
656 views

Exchange 2010 SP1 and RDG (Remote Desktop Gateway role) and VPN (Remote Access Server role) all on one box, in DMZ?

We're finding that RDG (Remote Desktop Gateway role) and VPN (Remote Access Server role) and Exchange roles do not want to play nice on one Server 2008 R2 machine. For this reason we've moved to ...
1
vote
4answers
406 views

Wildcard cert Exchange 2010 on Server 2008 R2 - broken pages, broken Droid connection?

Hardware/software info Server 2008 R2 64 bit IIS 7 Exchange 2010 Issues and steps taken: I have imported my Godaddy wildcard cert, and all intermediate certs related to the wildcard cert, into ...
3
votes
1answer
3k views

IIS7 SSL Cert replaced, still sending old expired cert to browser

Previously I had a SSL Cert from another company. It expired last night. I purchased a new one this morning, deleted the first one from the server under "Server Certificates" and created a new ...
2
votes
2answers
465 views

SSL Redirect in IIS without causing the browser to give a warning

I have the subdomain https://a.site.com. I need to redirect it to https://a.site2.com as site.com is no longer is in use (we have rebranded). What is the best way to do this without getting the ...
0
votes
1answer
367 views

IIS 7 Site using HTTPS not Accessible from Outside Internet (is accessible from intranet)

I am trying to set up an HTTPS site on IIS 7. I have added the certificate, set up the appropriate bindings and the site is accesible from within my company's intranet, however no one from the outside ...
0
votes
1answer
311 views

IIS 7 Redirect To SSL

I have an intranet site, which is running on IIS 7. The site is accessible using both the FQDN (mysite.mydomain.mycompany) and by just "mysite". The SSL certificate is signed for FQDN. It's installed ...
1
vote
1answer
160 views

How to apply IE SSL MS Office document fix to entire web server?

I've several areas on my web application where the user is allowed to download Microsoft Office documents. I need to apply the fix listed here Web sites that want to allow this type of operation ...
0
votes
3answers
318 views

IIS7 install two SSL certificates to two different host (not subdomains)

My question is very similar to this one: IIS 7.0 install two SSL certificates with two different host headers except that my domains are totally different: 1 SSL for http://domain1.com 1 SSL for ...
0
votes
2answers
801 views

SSL Certificate Stops Working after Server Reboot on IIS7, W2K8

We recently upgraded from W2K3/IIS6 to W2K8/IIS7 and have been having problems with our SSL Certificate (Thawte 123 SSL certificate) ceasing to work after rebooting. Initially, the intermediate ...
0
votes
1answer
224 views

SSL Certificate failed install in IIS7

I can't seem to install my SSL in IIS7 because when I do it appears in the Server Certificates list but then if I navigate away from that page or refresh it then it disappears? I don't know if it has ...
0
votes
1answer
733 views

IIS7 redirection best practices

I am looking for the "best practice" way of secure site redirection with IIS7 and ASP.net. Say I have two domain names: mydomain.com mydomain.net each with a www subdomain. I have a single EV ...
2
votes
1answer
478 views

Safari SSL certificate 403 forbidden

I have a web application deployed onto IIS 7 (Version 7.0.6000) on a Window 2008 Server using an SSL certificate (issued by Equifax). The web application is accessible over https using IE, Firefox and ...
0
votes
2answers
603 views

How can I install root or intermediate SSL certificates without restarting server?

For installation of a certificate I needed to install the root and intermediate certificates as well. This was recognized (after IIS reset) by Firefox and IIS at once, but not by IE, Opera or ...
1
vote
2answers
517 views

Secure connections with Domain aliases running on IIS7

I have a site that can be accessed through example.com. I can secure traffic to and from this site by installing a certificate on the web server that is tied to the example domain. Now, I have ...
5
votes
3answers
3k views

IIS 7 Still Serving old SSL Certificate

I installed a new SSL certificate into IIS7, removed the old certificate and setup the bindings for the new certificate - so https is now bound to the new certificate only. I restarted IIS7 (and the ...
0
votes
0answers
103 views

Site not working, not sure how to open the ports

We are running a VPS on win2008. I have two static IP's that are configured for one NIC (probably all virtually because it's a VPS). In the firewall I have a rule to allow traffic inbound on ports 80 ...
4
votes
2answers
2k views

Installed SSL for domain, now getting connection reset error

I've just installed an SSL certificate for our domain, and now when I try to browse to the site using https I get a connection reset error in FF and chrome both locally and from a client. I can still ...
6
votes
2answers
2k views

How can I verify/read an IIS7 SSL renewal CSR with OpenSSL

I have the privilege of handling ~5 SSL CSRs per week, checking their validity before passing them off to our CA for action. I use OpenSSL on an Ubuntu machine to check that they are valid, testing ...
2
votes
1answer
106 views

Two URLs for a website one with SSL

I have a website in IIS7. It has 3 URLs. www.mydomain.com mydomain.com secure.mydomain.com secure.mydomain.com should be run with an SSL certificate.. Hitting http://secure.mydomain.com should hit ...
3
votes
1answer
1k views

Use SSL only on one file in iis 7.5?

I have a website hosted on an IIS 7.5/Server 2008 R2 Server. I want to use SSL and Basic Authentication on one file in the site. This used to be easy on sub-7 IIS versions, how can I do it on 7.5?