Re: SSL Certificate Cached?

From: Nigel Moore (anonymous_at_discussions.microsoft.com)
Date: 03/19/04


Date: Thu, 18 Mar 2004 22:18:35 -0800

Hi Bernard,

Thank you for your suggestions. I think I have fixed the
problem. Have a look at http://www.tek-
tips.com/viewthread.cfm?SQID=779567&SPID=41&page=1

The problem was the ISA server had a certificate set in
its properties for all Incoming Web Requests. I changed
the certificate it was supposed to use and voila!

Thought I would let you know in case you came up against
it again.

Thanks,

Nigel

>-----Original Message-----
>No clue. have you try a browse from netscape or other
browser ?
>have you try on a brand new connection ?
>do you have ISA or proxy server in front of your web
server ?
>
>and you might want to try IE groups, maybe experts can
help up.
>
>--
>Regards,
>Bernard Cheah
>http://support.microsoft.com/
>http://www.msmvps.com/bernard/
>
>
><anonymous@discussions.microsoft.com> wrote in message
>news:b56701c40d6c$93c77d10$a001280a@phx.gbl...
>> Hi,
>>
>> Yes, I have rebooted the entire machine approximately
10
>> times throughout this ordeal.
>>
>> Nige
>>
>> >-----Original Message-----
>> >One more things.. have you try restart IIS or reboot
>> server ?
>> >
>> >--
>> >Regards,
>> >Bernard Cheah
>> >http://support.microsoft.com/
>> >http://www.msmvps.com/bernard/
>> >
>> >
>> >"Nigel Moore" <nigel@mtec.com.au.discuss> wrote in
>> message
>> >news:e4c501c40ba9$7d690670$a301280a@phx.gbl...
>> >> Thank you for the reply. I have done all you
suggested
>> >> and it still shows up as the original certificate.
>> >>
>> >> Even if I right click on Default Web Site and Choose
>> >> properties -> Directory Security and choose "View
>> >> Certificate" it shows here the CORRECT one, however
>> when
>> >> I go to the site, the old one still shows up.
>> >>
>> >> I have gone through a couple of times getting a new
>> >> certificate issued from the certification authority
and
>> >> going through the whole process from scratch however
>> >> every single time the old SSL certificate is still
>> there
>> >> when I browse to the site..
>> >>
>> >> I even removed it completely from the Certificates
snap
>> >> in through MMC and it came back?
>> >>
>> >> Any more ideas before I throw the server out the
window
>> >> (it is on the 3rd story of a building :-)
>> >>
>> >>
>> >> >-----Original Message-----
>> >> >Weird. Have you try to remove the cert from IIS
MMC ?
>> >> >Try remove all certs then import the new cert using
>> this
>> >> method.
>> >> >How to Import a Server Certificate for Use in
Internet
>> >> Information Services
>> >> >5.0
>> >> >http://support.microsoft.com/?id=232137
>> >> >
>> >> >it apply to IIS 6.0 as well, while you in the cert
mmc
>> >> (local computer)
>> >> >under the personal folder, make sure you only has
the
>> >> new cert and old cert
>> >> >is not there.
>> >> >
>> >> >
>> >> >--
>> >> >Regards,
>> >> >Bernard Cheah
>> >> >http://support.microsoft.com/
>> >> >http://www.msmvps.com/bernard/
>> >> >
>> >> >
>> >> >"Nigel Moore" <nigel@remove-this.mtec.com.au>
wrote in
>> >> message
>> >> >news:de1a01c40ae5$ed8ff680$a101280a@phx.gbl...
>> >> >> Hi,
>> >> >>
>> >> >> I have a Small Business Server 2003 running IIS
>> 6.0. I
>> >> >> have been setting up Outlook Web Access. I
>> originally
>> >> >> installed the Certificate Authority and issued a
>> >> >> certificate for the server so I could access it
on
>> >> >> https://mail.server.com/exchange however now I
have
>> >> >> purchased a correct SSL certificate from
>> >> >> www.instantssl.com (whom I have used before on
>> another
>> >> >> server successfully). Now I have tried removing
the
>> old
>> >> >> certificate from Directory Security and adding
the
>> new
>> >> >> one. This works *only* if I access the site from
the
>> >> >> local machine (i.e. https://localhost/exchange).
If
>> I
>> >> >> access it locally, I can double click on the
>> padlock on
>> >> >> IE and the certificate shows correctly. However
if I
>> >> >> access it from externally (I have tried about 5
>> >> different
>> >> >> sites over about 2 months) I get the original
cached
>> >> >> certificate (which shows errors as it is not
>> trusted).
>> >> I
>> >> >> have so far done the following:
>> >> >>
>> >> >> 1. Reinstalled ISA Server
>> >> >> 2. Reinstalled IIS
>> >> >> 3. Reinstalled Exchange
>> >> >> 4. Removed Certificate Authority
>> >> >> 5. Removed all of the certificates I created.
>> >> >> 6. Reconfigured the Directory Security
>> approximately 20
>> >> >> times
>> >> >>
>> >> >> I am now at a loss as to what I can do next. The
SSL
>> >> >> authority where I purchased the certificate is
also
>> >> >> stuck. I can't find anywhere else that I can go
to
>> >> remove
>> >> >> the cached certificate.
>> >> >>
>> >> >> Can anyone point me in the right direction or
give
>> me
>> >> any
>> >> >> help? Any help would be greatly appreciated.
>> >> >
>> >> >
>> >> >.
>> >> >
>> >
>> >
>> >.
>> >
>
>
>.
>



Relevant Pages

  • Re: RPC over HTTP
    ... Exchange Server 2007. ... the name on the certificate does have to match the name ... For the first hop (the request from the client on the ... the server, which is ISA Server. ...
    (microsoft.public.isa.publishing)
  • RPC over HTTP, Microsoft solution
    ... Exchange Server 2003 RPC over HTTP Deployment Scenarios ... Place a check in the box next to 'Certificate Services' and click 'Yes' ...
    (microsoft.public.exchange.setup)
  • Re: OWA 2003 w/ Smart Card Authentication.
    ... Exchange 2003 server via ActivSync. ... the IIS certificate. ... Whether or not authentication will succeed is completely dictated by ... Server's SSL certificate must be configured on root of v-server via ...
    (microsoft.public.exchange.connectivity)
  • Re: How do I require a client certificate when publishing a Web server?
    ... certificate, or a trust issue on the ISA Server - missing root certificate ... or ISA Server is not configured to trust the certificate (on the Client ... SSL listener to SSL Client Certificate Authentication, ...
    (microsoft.public.isa.publishing)
  • Re: Configuring SBS2003 for OWA and RWW
    ... And make sure certificate will not be ... On the Connection Type page, click Broadband, and then click Next. ... next to Preferred DNS server and next to ... If you are using ISA, please go to ISA management console, and navigate ...
    (microsoft.public.windows.server.sbs)

Quantcast