Tag Info

Hot answers tagged

6

You really shouldn't be using IP addresses in a SSL certificate; you should setup a proper DNS infrastructure such that you have f.e. internal.yourdomain.com pointing to the internal IP address, and external.yourdomain.com pointing to the external one; then you'll have to put both names as Subject Alternative Names in the certificate, and it will work ...


3

See Massimo's Answer for the Right way to do it. Otherwise you can add IPs to the certificate's SAN by creating a configuration file with the following (plus any other options you want): [ v3_ca ] subjectAltName = IP:1.2.3.4 Or if you have a bunch of IPs.... [ v3_ca ] subjectAltName = @alt_names [alt_names] IP.1 = 1.2.3.4 IP.2 = 2.3.4.5 IP.3 = 3.4.5.6 ...


1

APPCMD LIST VDIRS And anything which ends with a slash is a site (a root level application). But that'd be doing it wrong! Any server migration which doesn't involve the use of Web Deployment Tool (MSDeploy) to pretty-much-automatically: package up all the websites and the content, and blat it onto the target system is likely to be a waste of ...


1

A company called Nartac software makes a free IIS Crypto configuration tool that can be used to enable/disable protocols and cipher suites in IIS on Windows 2003, 2008 and 2012. It also comes with templates for configuring IIS to be FIPS 140.2 compliant, integrates with the Qualys SSL site analyzer for testing public urls, and has a list of other validation ...



Only top voted, non community-wiki answers of a minimum length are eligible