Re: SSL Certificate Cached?
From: Nigel Moore (anonymous_at_discussions.microsoft.com)
Date: 03/19/04
- Next message: Bernard: "Re: SSL Certificate Cached?"
- Previous message: Jonathan Maltz [MS-MVP]: "Re: Track client's IP"
- In reply to: Bernard: "Re: SSL Certificate Cached?"
- Next in thread: Bernard: "Re: SSL Certificate Cached?"
- Reply: Bernard: "Re: SSL Certificate Cached?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Thu, 18 Mar 2004 22:18:35 -0800
Hi Bernard,
Thank you for your suggestions. I think I have fixed the
problem. Have a look at http://www.tek-
tips.com/viewthread.cfm?SQID=779567&SPID=41&page=1
The problem was the ISA server had a certificate set in
its properties for all Incoming Web Requests. I changed
the certificate it was supposed to use and voila!
Thought I would let you know in case you came up against
it again.
Thanks,
Nigel
>-----Original Message-----
>No clue. have you try a browse from netscape or other
browser ?
>have you try on a brand new connection ?
>do you have ISA or proxy server in front of your web
server ?
>
>and you might want to try IE groups, maybe experts can
help up.
>
>--
>Regards,
>Bernard Cheah
>http://support.microsoft.com/
>http://www.msmvps.com/bernard/
>
>
><anonymous@discussions.microsoft.com> wrote in message
>news:b56701c40d6c$93c77d10$a001280a@phx.gbl...
>> Hi,
>>
>> Yes, I have rebooted the entire machine approximately
10
>> times throughout this ordeal.
>>
>> Nige
>>
>> >-----Original Message-----
>> >One more things.. have you try restart IIS or reboot
>> server ?
>> >
>> >--
>> >Regards,
>> >Bernard Cheah
>> >http://support.microsoft.com/
>> >http://www.msmvps.com/bernard/
>> >
>> >
>> >"Nigel Moore" <nigel@mtec.com.au.discuss> wrote in
>> message
>> >news:e4c501c40ba9$7d690670$a301280a@phx.gbl...
>> >> Thank you for the reply. I have done all you
suggested
>> >> and it still shows up as the original certificate.
>> >>
>> >> Even if I right click on Default Web Site and Choose
>> >> properties -> Directory Security and choose "View
>> >> Certificate" it shows here the CORRECT one, however
>> when
>> >> I go to the site, the old one still shows up.
>> >>
>> >> I have gone through a couple of times getting a new
>> >> certificate issued from the certification authority
and
>> >> going through the whole process from scratch however
>> >> every single time the old SSL certificate is still
>> there
>> >> when I browse to the site..
>> >>
>> >> I even removed it completely from the Certificates
snap
>> >> in through MMC and it came back?
>> >>
>> >> Any more ideas before I throw the server out the
window
>> >> (it is on the 3rd story of a building :-)
>> >>
>> >>
>> >> >-----Original Message-----
>> >> >Weird. Have you try to remove the cert from IIS
MMC ?
>> >> >Try remove all certs then import the new cert using
>> this
>> >> method.
>> >> >How to Import a Server Certificate for Use in
Internet
>> >> Information Services
>> >> >5.0
>> >> >http://support.microsoft.com/?id=232137
>> >> >
>> >> >it apply to IIS 6.0 as well, while you in the cert
mmc
>> >> (local computer)
>> >> >under the personal folder, make sure you only has
the
>> >> new cert and old cert
>> >> >is not there.
>> >> >
>> >> >
>> >> >--
>> >> >Regards,
>> >> >Bernard Cheah
>> >> >http://support.microsoft.com/
>> >> >http://www.msmvps.com/bernard/
>> >> >
>> >> >
>> >> >"Nigel Moore" <nigel@remove-this.mtec.com.au>
wrote in
>> >> message
>> >> >news:de1a01c40ae5$ed8ff680$a101280a@phx.gbl...
>> >> >> Hi,
>> >> >>
>> >> >> I have a Small Business Server 2003 running IIS
>> 6.0. I
>> >> >> have been setting up Outlook Web Access. I
>> originally
>> >> >> installed the Certificate Authority and issued a
>> >> >> certificate for the server so I could access it
on
>> >> >> https://mail.server.com/exchange however now I
have
>> >> >> purchased a correct SSL certificate from
>> >> >> www.instantssl.com (whom I have used before on
>> another
>> >> >> server successfully). Now I have tried removing
the
>> old
>> >> >> certificate from Directory Security and adding
the
>> new
>> >> >> one. This works *only* if I access the site from
the
>> >> >> local machine (i.e. https://localhost/exchange).
If
>> I
>> >> >> access it locally, I can double click on the
>> padlock on
>> >> >> IE and the certificate shows correctly. However
if I
>> >> >> access it from externally (I have tried about 5
>> >> different
>> >> >> sites over about 2 months) I get the original
cached
>> >> >> certificate (which shows errors as it is not
>> trusted).
>> >> I
>> >> >> have so far done the following:
>> >> >>
>> >> >> 1. Reinstalled ISA Server
>> >> >> 2. Reinstalled IIS
>> >> >> 3. Reinstalled Exchange
>> >> >> 4. Removed Certificate Authority
>> >> >> 5. Removed all of the certificates I created.
>> >> >> 6. Reconfigured the Directory Security
>> approximately 20
>> >> >> times
>> >> >>
>> >> >> I am now at a loss as to what I can do next. The
SSL
>> >> >> authority where I purchased the certificate is
also
>> >> >> stuck. I can't find anywhere else that I can go
to
>> >> remove
>> >> >> the cached certificate.
>> >> >>
>> >> >> Can anyone point me in the right direction or
give
>> me
>> >> any
>> >> >> help? Any help would be greatly appreciated.
>> >> >
>> >> >
>> >> >.
>> >> >
>> >
>> >
>> >.
>> >
>
>
>.
>
- Next message: Bernard: "Re: SSL Certificate Cached?"
- Previous message: Jonathan Maltz [MS-MVP]: "Re: Track client's IP"
- In reply to: Bernard: "Re: SSL Certificate Cached?"
- Next in thread: Bernard: "Re: SSL Certificate Cached?"
- Reply: Bernard: "Re: SSL Certificate Cached?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|