Re: Trying to create a pass through for SSL

From: Ellen_WI (Ellen.Kozel@sschc.org)
Date: 04/02/03


From: "Ellen_WI" <Ellen.Kozel@sschc.org>
Date: Wed, 2 Apr 2003 06:44:29 -0800


OK!... Thank you for the insight. Yes it's exactly as you
describe. My question is where in properties is this
accept SSL only check box and is it on the secure website
or the virtual directory?

-Ellen
>-----Original Message-----
>Can you clarify a couple of things::
>1. You have a website at http://mysub-domain.xyz.com
>2. You have a secure website at
https://secure.xyz.com/~mysub-domain
>3. https://secure.xyz.com/~mysub-domain points to the
exact same content as
>http://mysub-domain.xyz.com ??
>
>That sounds like no problems on IIS. All it entails is
one SSL certificate
>shared on a secure site, and all sub-domains that have
secure services are
>simply vdirs under the secure site. You then
check "Accept only SSL" on the
>secure site and you are done.
>
>I create two websites, one is secure and one isn't, and I
create a vdir on
>the secure one that is named like the insecure one and
point its physical
>directory to the insecure website's content, and when I
want secure services
>I simply make the client go to the secure website using
my vdir name.
>
>Or am I completely missing something?
>
>FYI: SSL has nothing to do with PHP -- SSL is a
connection-level concept
>while PHP is an application-layer concept -- SSL happens
way before PHP even
>gets involved.
>
>--
>//David
>This posting is provided "AS IS" with no warranties, and
confers no rights.
>//
>"Ellen_WI" <Ellen.Kozel@sschc.org> wrote in message
>news:004201c2f8d1$963a4650$a001280a@phx.gbl...
>Hi Bernard..
>
>What I want to do is be able to share an SSL certificate
>over several sites. I know this can be done as I have it
>being done on a personal web server by an outside vendor.
>
>Basically it works this way. (I'm not sure technically how
>it works and thats why I'm trying to engineer one.)
>
>The main webserver the sites sit on has a subdomain that a
>certificate is issued to. Lets call it secure.xyz.com. I
>have a website on the same server whether it be a sub-
>domain or domain of itself. Now when the website was
>setup, a secure connection to the shared SSL was also
>established the form it takes is
>https://secure.xyz.com/~my sub or domain name, less
>the .com. Example: The original website http:mysub-
>domain.xyz.com and the secure website through the shared
>SSL https://secure.xyz.com/~mysub-domain. If I want secure
>services I call the https connection and then add to it
>the virtual path example: https://secure.xyz.com/~mysub-
>domain/purchases/index.asp.
>
>I looked at the way the connection appears and what I did
>was created a secure.xyz.com and attached a certificate
>opening the SSL channel 443. Next I created a virtual
>directory inside the secure.xyz.com and called it ~mysub-
>domain. I did this to insure no duplicate names. If I
>remove the SSL connection to the two of them
>(secure.xyz.com and virtual directory ~mysubdomain) and
>call http://secure.xyz.com/~mysub-domain the mysub-domain
>comes up in the browser no problem. However, when I attach
>the SSL socket to the website I get page not found. The
>mysubdomain doesn't own a certificate only the
>secure.xyz.com. I've been searching the net and know this
>can be done in PHP but am not familiar with that add-in.
>Microsoft does attach the secure.xyz.com cetificate to the
>virtual directory but I can't view the folder through a
>web browser. I'm sure MS must allow it or they wouldn't
>give SSL security tabs to virtual directories or would
>they?
>
>Can you help me.
>
>Ellen
>
>>-----Original Message-----
>>what do you mean by 'pass through' here ?
>>authentication or redirect ?
>>
>>how is this virtual directory 'connects' to the internal
>>site ? do the internal site has a cert as well ?
>>
>>would be helpful to have more detail on overall setup
>info...
>>
>>
>>--
>>Regards,
>>Bernard Cheah
>>http://support.microsoft.com/
>>
>>
>>"Ellen_WI" <Ellen.Kozel@sschc.org> wrote in message
>>news:01c201c2f89a$f68be310$a401280a@phx.gbl...
>>> I created a website called secure.xyz.com and then a
>>> virtual directory inside that website called ~mis. The
>>> virtual directory connects to an internal website. In
>http
>>> mode the pass through to the site works fine, but when
I
>>> attach the SSL certificate to the website and try to
>>> access the virtual directory I get a page not found
>error
>>> message. I have tested the root and SSL works fine up
to
>>> there, but it seems it's not seeing the virtual
>directory.
>>> I checked the virtual directory and the certificate is
>>> attached to it.
>>
>>
>>.
>>
>
>
>.
>



Relevant Pages

  • Re: Ace Password Sniffer : How does it work ?
    ... >> Another protocol that offers same is IPSec. ... >> authentication and secure transfer of data between server and client ... >> would be pretty hard to use SSL to secure data exchanged between ... Once you are done with the secured login, ...
    (microsoft.public.security)
  • RE: Certificate prblems with exchange public folders
    ... c103b404 during accessing Public Folders in Exchange System Manager. ... SSL certificate server name is incorrect" with error code c103b404 stemmed ... Click to clear the Require secure channel check box. ... 8.Restart Exchange System Attendant Service and then restart ...
    (microsoft.public.windows.server.sbs)
  • Re: Trying to create a pass through for SSL
    ... shared on a secure site, and all sub-domains that have secure services are ... You then check "Accept only SSL" on the ... I simply make the client go to the secure website using my vdir name. ... (secure.xyz.com and virtual directory ~mysubdomain) ...
    (microsoft.public.inetserver.iis.security)
  • Re: Setting up HTTPS w/subdomain on Apache2
    ... Secure data transfer ... The docs recommended using SSL, ... I'm mistaken, HTTP w/SSL = HTTPS. ... Authentication would be basic or digest (Personally I'm using basic ...
    (Ubuntu)
  • Re: Setting up HTTPS w/subdomain on Apache2
    ... Secure data transfer ... The docs recommended using SSL, ... I'm mistaken, HTTP w/SSL = HTTPS. ... Authentication would be basic or digest (Personally I'm using basic ...
    (Ubuntu)

Quantcast