Re: SSL Certificate Cached?

From: Bernard (qbernard_at_hotmail.com.discuss)
Date: 03/16/04

  • Next message: Bernard: "Re: IIS - problemer." 
    Date: Tue, 16 Mar 2004 16:08:07 +0800

    Weird. Have you try to remove the cert from IIS MMC ?
    Try remove all certs then import the new cert using this method.
    How to Import a Server Certificate for Use in Internet Information Services
    5.0
    http://support.microsoft.com/?id=232137

    it apply to IIS 6.0 as well, while you in the cert mmc(local computer)
    under the personal folder, make sure you only has the new cert and old cert
    is not there. 

    -- 
Regards,
Bernard Cheah
http://support.microsoft.com/
http://www.msmvps.com/bernard/
"Nigel Moore" <nigel@remove-this.mtec.com.au> wrote in message
news:de1a01c40ae5$ed8ff680$a101280a@phx.gbl...
> Hi,
>
> I have a Small Business Server 2003 running IIS 6.0. I
> have been setting up Outlook Web Access. I originally
> installed the Certificate Authority and issued a
> certificate for the server so I could access it on
> https://mail.server.com/exchange however now I have
> purchased a correct SSL certificate from
> www.instantssl.com (whom I have used before on another
> server successfully). Now I have tried removing the old
> certificate from Directory Security and adding the new
> one. This works *only* if I access the site from the
> local machine (i.e. https://localhost/exchange). If I
> access it locally, I can double click on the padlock on
> IE and the certificate shows correctly. However if I
> access it from externally (I have tried about 5 different
> sites over about 2 months) I get the original cached
> certificate (which shows errors as it is not trusted). I
> have so far done the following:
>
> 1. Reinstalled ISA Server
> 2. Reinstalled IIS
> 3. Reinstalled Exchange
> 4. Removed Certificate Authority
> 5. Removed all of the certificates I created.
> 6. Reconfigured the Directory Security approximately 20
> times
>
> I am now at a loss as to what I can do next. The SSL
> authority where I purchased the certificate is also
> stuck. I can't find anywhere else that I can go to remove
> the cached certificate.
>
> Can anyone point me in the right direction or give me any
> help? Any help would be greatly appreciated.
  • Next message: Bernard: "Re: IIS - problemer."

    Relevant Pages

    • Re: Web Certificate for IIS Server on SBS Domain
      ... Before your reply, I actually ran across rapidssl myself, and have ordered and installed the free 30-day certificate on my site. ... I explained what you'd told me about putting my existing configuration at risk by installing Cert Services, and he said he didn't know that. ... Again, if you're just needing a cert to install on your web server to provide SSL connectivity for remote users, go with an external third-party provider. ... When you add Certificate Services on an internal network, lots of internal communications will start using pieces provided by the Cert Server instead of the defaults from Server 2003, and when things blow up, they can blow up gloriously. ...
      (microsoft.public.windows.server.sbs)
    • Re: Activesync between Windows Mobile 5 and SBS2003 gives error
      ... If you don't find a cert here that matches the URL for OWA, you need to re-run the CEICW wizard on the SBS box and re-create the self signed cert. ... I exported the certificate straight from the server. ... Treo 700wx running Windows Mobile 5. ...
      (microsoft.public.windows.server.sbs)
    • Re: Problems setting up SSL on Exchange 2003 Front End server
      ... No it doesn't look like there is anything under IIS Manager about CertSrv, ... It was installed in preperation for the Exchange FE server. ... My certificate knoweldge is fairly minimal. ...
      (microsoft.public.exchange.admin)
    • Re: Terminal Services over a VPN
      ... Create a certificate request and submit it to godaddy in order to obtain a public cert. ... You can use the wizard in IIS Manager for this by creating a new website that matches the above name (on your TS server), right-click and choose properties, directory security tab, server certificate button. ... After the install you can stop or delete the website created above since you don't need it for anything. ...
      (microsoft.public.windows.terminal_services)
    • This is Definitely a BUG!! Re: Cant disable "Trusted" for Certificates Issued by MS Certi
      ... purpose of the root certificate for MS Certificate Server, IIS is ALWAYS ... >> cert for IIS with MS Certificate Server, and several client certs. ...
      (microsoft.public.platformsdk.security)