Re: WinXP - Private SSL certificate cannot install?

From: BB (Bernard_at_3exp.com)
Date: 05/03/03 

Date: Sat, 3 May 2003 19:32:03 +0800

I'm lost too :(

Is there anything else in the event log ?
the only thing I can think of now is that your XP Pro
was upgraded from XP Home.. is this in place upgrade
or clean install ??

btw does http work without any problems ? and you
only face this error when you try deploy SSL into IIS. 

-- 
Regards,
Bernard Cheah
http://support.microsoft.com/
"Tony Su" <tonysu@su-networking.com> wrote in message
news:013f01c310d4$4f6ed2c0$a301280a@phx.gbl...
> Nope, still a problem.
> I was applying permissions to the inetpub folder anyway,
> not the %systemroot%\system32\... folders.
>
> I still took the opportunity to doublecheck permissions
> (they look OK except that XP did not permit "everyone"
> only Power Users modify privileges. At least temporarily I
> am allowing "everyone" access anyway as specified in the
> article.
>
> Have also since reset similar permissions to the InetPub
> directory... Creater Owner, Admin, System =Full Control,
> Everyone=modify.
>
> And, still no difference.
>
> Doublechecking to make sure INETPUB permissions isn't an
> issue, I re-pointed the website to a folder outside the
> inetpub tree.
>
> Still stumped.
>
> Tony
>
>
>
>
> >-----Original Message-----
> >Bernard,
> >I think I see what the problem might be. I'll check it
> out
> >and return a post within the hour.
> >
> >I've been trying to restrict permissions to anyone
> >including local Users. I suspect that permissions may
> have
> >locked out something somewhere.
> >
> >I misread the first troubleshooting step of your article.
> >
> >Thanks,
> >
> >Tony
> >
> >
> >
> >
> >>-----Original Message-----
> >>In XP Pro, you don't have the HTMLA or
> >>web administration site. this feature only
> >>available in Server version.
> >>
> >>Next the Adminsamples in XP Pro is
> >>c:\inetpub\adminscripts\
> >>
> >>
> >>-- 
> >>Regards,
> >>Bernard Cheah
> >>http://support.microsoft.com/
> >>
> >>
> >>"Tony Su" <tonysu@su-networking.com> wrote in message
> >>news:03a901c310c7$3d674420$3001280a@phx.gbl...
> >>> Hello, thanks for providing input...
> >>>
> >>> Have inspected the article and the related
> >article "Remove
> >>> and Re-install IIS 5.0 and 5.1."
> >>>
> >>> Have removed and re-installed the certificate and also
> >>> replaced with another certificate without improvement.
> >>>
> >>> Re: The article you refer to, one of the first things I
> >>> verified was that the ISAPI sspifilt was installed and
> >>> active (upward green arrow).
> >>>
> >>> The article then goes on to suggest testing output
> >against
> >>> a %systemroot%\system32\inetsrv\Adminsamples directory,
> >>> but the "Adminsamples" directory does not exist. I
> >>> uninstalled and re-installed IIS hoping that it was a
> >>> faulty installation, but the directory is still
> missing.
> >>> When I look in IIS, it looks like IIS WebAdmin does not
> >>> exist. When I doublechecked the Windows Add/Remove for
> >>> IIS, there is no WebAdmin option I might have missed.
> No
> >>> WebAdmin virtual directory exists. I don't see
> >any "secure
> >>> default website" which is installed which can be
> tested.
> >>>
> >>> So, maybe this is new? This is a brand new XP Pro
> media.
> >>>
> >>> Thx.
> >>>
> >>> Tony Su
> >>>
> >>>
> >>>
> >>>
> >>>
> >>> >-----Original Message-----
> >>> >1) I would try to reinstall the cert again,
> >>> >remove it, and import it again.
> >>> >
> >>> >then try https://
> >>> >
> >>> >2) Try this kb to relad the sspiflit.dll
> >>> >HOW TO: Install and Reload the SSL Filter Sspifilt.dll
> >>> >http://support.microsoft.com/?id=247098
> >>> >
> >>> >
> >>> >-- 
> >>> >Regards,
> >>> >Bernard Cheah
> >>> >http://support.microsoft.com/
> >>> >
> >>> >
> >>> >"Tony Su" <tonysu@su-networking.com> wrote in message
> >>> >news:032401c31051$2d765130$a401280a@phx.gbl...
> >>> >> Additional info...
> >>> >> This was in the event viewer, but additional
> >research is
> >>> >> not turning up a solution...
> >>> >>
> >>> >> The first System Event...
> >>> >> "A fatal error..." with an error code 0x80090016
> >>> >>
> >>> >> That is followed by what was generated when I tried
> >to
> >>> >> actually access a website...
> >>> >>
> >>> >> An attempt was made to load
> >filter 'C:\WINDOWS\system32
> >>> >> \inetsrv\sspifilt.dll' on a server instance but it
> >>> >> requires the SF_NOTIFY_READ_RAW_DATA filter
> >notification
> >>> >> so it must be loaded as a global filter.
> >>> >>
> >>> >> TIA,
> >>> >>
> >>> >> Tony Su
> >>> >>
> >>> >>
> >>> >>
> >>> >>
> >>> >> >-----Original Message-----
> >>> >> >Hope someone can find more than just this one ref I
> >>> >> >found... Article 314864 which suggests any XP not
> >>> >> upgraded
> >>> >> >to SP1's crypt32.dll is faulty.
> >>> >> >
> >>> >> >This is a brand new XPPro upgraded from XPHome.
> >Says it
> >>> >> >has XP SP1 installed. Inspected the Crypt32.dll
> file
> >>> and
> >>> >> >the version is much later than the article said it
> >>> needed
> >>> >> >to be.
> >>> >> >
> >>> >> >Am using my own Win2K CA. Have created and
> installed
> >>> >> >numerous certificates in Win2K and Win2003
> websites
> >and
> >>> >> >ISA without incident.
> >>> >> >
> >>> >> >First thing I noticed during the online enrollment
> >>> >> invoked
> >>> >> >through IIS5.1 is that the certificate didn't
> >install
> >>> >> >immediately and automatically. I had to go back
> into
> >>> the
> >>> >> >website, pick the certificate out of the local
> >store to
> >>> >> >install.
> >>> >> >
> >>> >> >After that, any person can view HTTP properly but
> >>> cannot
> >>> >> >view HTTPS. Tried everything I can think of
> >including
> >>> >> >installing a new certificate. Inspecting the
> >>> >> certificate's
> >>> >> >properties, I don't see anything amiss. Is only
> 128-
> >bit
> >>> >> >encryption.
> >>> >> >
> >>> >> >So, does anyone know if there are current
> >outstanding
> >>> >> >problems with IIS5.1 and private CA certificates?
> >>> >> >
> >>> >> >TIA,
> >>> >> >
> >>> >> >Tony Su
> >>> >> >.
> >>> >> >
> >>> >
> >>> >
> >>> >.
> >>> >
> >>
> >>
> >>.
> >>
> >.
> >

Relevant Pages

  • Newbie question -- install ISS 4.0 or > to XP for service entensions install
    ... Home does not support IIS but XP Pro does. ... >What I'd like to do initially is install the FP ... extensions (I downloaded those for Front Page 2002 would ...
    (microsoft.public.inetserver.iis)
  • Re: learning ASP on XP Home Edition
    ... Upgrade to XP Pro without succes to ... > needed the iis server for labs and homework. ... Better install a full XP Pro. ...
    (microsoft.public.inetserver.asp.general)
  • Re: security in IIS use
    ... XP Pro is not a server system and if you are using it for development ... There's a lot of bull going on about IIS security, ... thing is to install SP3 and then the IIS patches released after SP3, ...
    (microsoft.public.inetserver.iis.security)
  • Re: IIS for asp.net applications
    ... > I've just started using visual studio.net 2003 and whereas before in uni I ... It tells me to install IIS which does not appear under the ... You need to install Internet Information Server (IIS) on your PC using your ... OS CD (Win 200 Pro or Win XP Pro) then follow the steps in Knowledgebase ...
    (microsoft.public.dotnet.academic)
  • RE: installing visio 2003
    ... and you dont have administrative rights it wont let you install software. ... > I keep getting installation errors installing visio 2003 on windows xp pro sp2 ... Setup cannot open the registry key ... > permissions to access the registry or contact your Information Technology ...
    (microsoft.public.visio)