Re: Trying to create a pass through for SSL
From: Ellen_WI (Ellen.Kozel@sschc.org)
Date: 04/02/03
- Next message: Gary: "IIS Lockdown / URLScan - Where did my WebSite's go???"
- Previous message: JimC: "IISLockdown and FilesystemObject"
- In reply to: David Wang [Msft]: "Re: Trying to create a pass through for SSL"
- Next in thread: Ellen Kozel: "Re: Trying to create a pass through for SSL"
- Reply: Ellen Kozel: "Re: Trying to create a pass through for SSL"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "Ellen_WI" <Ellen.Kozel@sschc.org> Date: Wed, 2 Apr 2003 06:44:29 -0800
OK!... Thank you for the insight. Yes it's exactly as you
describe. My question is where in properties is this
accept SSL only check box and is it on the secure website
or the virtual directory?
-Ellen
>-----Original Message-----
>Can you clarify a couple of things::
>1. You have a website at http://mysub-domain.xyz.com
>2. You have a secure website at
https://secure.xyz.com/~mysub-domain
>3. https://secure.xyz.com/~mysub-domain points to the
exact same content as
>http://mysub-domain.xyz.com ??
>
>That sounds like no problems on IIS. All it entails is
one SSL certificate
>shared on a secure site, and all sub-domains that have
secure services are
>simply vdirs under the secure site. You then
check "Accept only SSL" on the
>secure site and you are done.
>
>I create two websites, one is secure and one isn't, and I
create a vdir on
>the secure one that is named like the insecure one and
point its physical
>directory to the insecure website's content, and when I
want secure services
>I simply make the client go to the secure website using
my vdir name.
>
>Or am I completely missing something?
>
>FYI: SSL has nothing to do with PHP -- SSL is a
connection-level concept
>while PHP is an application-layer concept -- SSL happens
way before PHP even
>gets involved.
>
>--
>//David
>This posting is provided "AS IS" with no warranties, and
confers no rights.
>//
>"Ellen_WI" <Ellen.Kozel@sschc.org> wrote in message
>news:004201c2f8d1$963a4650$a001280a@phx.gbl...
>Hi Bernard..
>
>What I want to do is be able to share an SSL certificate
>over several sites. I know this can be done as I have it
>being done on a personal web server by an outside vendor.
>
>Basically it works this way. (I'm not sure technically how
>it works and thats why I'm trying to engineer one.)
>
>The main webserver the sites sit on has a subdomain that a
>certificate is issued to. Lets call it secure.xyz.com. I
>have a website on the same server whether it be a sub-
>domain or domain of itself. Now when the website was
>setup, a secure connection to the shared SSL was also
>established the form it takes is
>https://secure.xyz.com/~my sub or domain name, less
>the .com. Example: The original website http:mysub-
>domain.xyz.com and the secure website through the shared
>SSL https://secure.xyz.com/~mysub-domain. If I want secure
>services I call the https connection and then add to it
>the virtual path example: https://secure.xyz.com/~mysub-
>domain/purchases/index.asp.
>
>I looked at the way the connection appears and what I did
>was created a secure.xyz.com and attached a certificate
>opening the SSL channel 443. Next I created a virtual
>directory inside the secure.xyz.com and called it ~mysub-
>domain. I did this to insure no duplicate names. If I
>remove the SSL connection to the two of them
>(secure.xyz.com and virtual directory ~mysubdomain) and
>call http://secure.xyz.com/~mysub-domain the mysub-domain
>comes up in the browser no problem. However, when I attach
>the SSL socket to the website I get page not found. The
>mysubdomain doesn't own a certificate only the
>secure.xyz.com. I've been searching the net and know this
>can be done in PHP but am not familiar with that add-in.
>Microsoft does attach the secure.xyz.com cetificate to the
>virtual directory but I can't view the folder through a
>web browser. I'm sure MS must allow it or they wouldn't
>give SSL security tabs to virtual directories or would
>they?
>
>Can you help me.
>
>Ellen
>
>>-----Original Message-----
>>what do you mean by 'pass through' here ?
>>authentication or redirect ?
>>
>>how is this virtual directory 'connects' to the internal
>>site ? do the internal site has a cert as well ?
>>
>>would be helpful to have more detail on overall setup
>info...
>>
>>
>>--
>>Regards,
>>Bernard Cheah
>>http://support.microsoft.com/
>>
>>
>>"Ellen_WI" <Ellen.Kozel@sschc.org> wrote in message
>>news:01c201c2f89a$f68be310$a401280a@phx.gbl...
>>> I created a website called secure.xyz.com and then a
>>> virtual directory inside that website called ~mis. The
>>> virtual directory connects to an internal website. In
>http
>>> mode the pass through to the site works fine, but when
I
>>> attach the SSL certificate to the website and try to
>>> access the virtual directory I get a page not found
>error
>>> message. I have tested the root and SSL works fine up
to
>>> there, but it seems it's not seeing the virtual
>directory.
>>> I checked the virtual directory and the certificate is
>>> attached to it.
>>
>>
>>.
>>
>
>
>.
>
- Next message: Gary: "IIS Lockdown / URLScan - Where did my WebSite's go???"
- Previous message: JimC: "IISLockdown and FilesystemObject"
- In reply to: David Wang [Msft]: "Re: Trying to create a pass through for SSL"
- Next in thread: Ellen Kozel: "Re: Trying to create a pass through for SSL"
- Reply: Ellen Kozel: "Re: Trying to create a pass through for SSL"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|