RE: Page error for pages requiring SSL

From: Jim Thomas (jimt@earthling.net)
Date: 10/18/02 

From: "Jim Thomas" <jimt@earthling.net>
Date: Thu, 17 Oct 2002 18:40:02 -0700

Srinivas,

Great! Thanks for the info.

I have now changed the site to a fixed IP and restarted
IIS. I get the same error. I turned off friendly errors
and I get the same error. At the bottom of the page it
says:

Cannot find server or DNS Error
Internet Explorer

There are no other errors (DNS or otherwise) on any other
pages of the site, just the SSL ones.

Here are some things I've done:

1. I made an ASP test page and put it in the same
directory. Same error.
2. Attempted to access it with http: and got a must use
SSL error page (correct behaviour).
3. Unchecked the require SSL on the directory and tried
to access with http: and got a must use SSL error again.
4. Retried after restarting ISS, same error.
5. Deleted the site, recreated it and left SSL off. The
ASP test page and my ASP.NET page work fine with http:.
6. Checked the require SSL box on the directory and
restarted IIS. Back to the original error.

I'm pretty stumped.

Still no errors in the logs. I hope you have some more
ideas.

Jim

>-----Original Message-----
>Hi Jim,
>SSL and Host Headers are mutually exclusive. We can't
use both at the same
>time. I am sure the KB article Q187504 explains why it
is this way, much
>better than I do. Doesn't it remind of 'Chicken or Egg
quandary'? :)
>(because - we want to find out which web server to use
but we can't tell
>that unless we decrypt the encrypted request header but
we can't decrypt
>the header unless we know which site/web server to use
that has the
>certificate, private key assosciated).
>You can test this on a different server with only one
site (or not using
>Host Headers) under SSL.
>
>I do not want to point you in wrong direction but the
article below might
>be interesting too (just to read). This talks about CMS
(Content Management
>Server) with its own Host Header Implementation
>Using SSL with Host Header Names in CMS 2001
>http://support.microsoft.com/support/kb/articles/q321/6/5
0.asp
>
>Hope this helps.
>
>Thank you,
>Srinivas Grandhi
>This posting is provided "AS IS", with no warranties,
and confers no
>rights.
>
>.
>

Relevant Pages

  • Re: securing multiple websites using wildcard certificate - one IIS 6.0 server
    ... own unique host headers associated to it all under *.domain.com as I ... is IIS will send the user using SSL to the default web on the ... To use three virtual webs with SSL, you need three public IPs on the outside ... and three non-public bound to your NIC on the server. ...
    (microsoft.public.inetserver.iis.security)
  • Multiple SSL sites on one server
    ... I have an IIS 5 server which is currently hosting our exchange 2003 outlook ... web access over ssl. ... I have also setup a redirect site on the server which will direct any ... Anyway - this was the only site running on this box so using host headers ...
    (microsoft.public.inetserver.iis)
  • Re: Installing multiple SSL certificates....
    ... Is there a better way to provide SSL encryption to me clients for their web ... Server certificates vs client certificates? ... IIS does NOT support SSL with host headers. ...
    (microsoft.public.security)
  • RE: Page error for pages requiring SSL
    ... When SSL is not required to view the page, ... >SSL and Host Headers are mutually exclusive. ... >(because - we want to find out which web server to use ... This talks about CMS ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Most users cant connect to our SSL-- help!
    ... I've included all relevant SSL settings from our ... Subject: Large percentage of customers cannot connect to https: ... server, which then grinds indefinitely. ... "2) Your secure order form is not working. ...
    (comp.security.misc)