Re: SSL Certificate Cached?

From: Bernard (qbernard_at_hotmail.com.discuss)
Date: 03/19/04

  • Next message: Thomas: "IIS 6 Integrated Authentification problem"
    Date: Fri, 19 Mar 2004 17:43:25 +0800
    
    

    Great ! should have thought of that earlier. anyway,here's a kb for ISA
    How to Set Up Internet Security and Acceleration Server to Host Web Sites by
    Using the Secure Sockets Layer Protocol
    http://support.microsoft.com/?id=292569

    -- 
    Regards,
    Bernard Cheah
    http://support.microsoft.com/
    http://www.msmvps.com/bernard/
    "Nigel Moore" <anonymous@discussions.microsoft.com> wrote in message
    news:fde201c40d7a$02a36390$a301280a@phx.gbl...
    > Hi Bernard,
    >
    > Thank you for your suggestions. I think I have fixed the
    > problem. Have a look at http://www.tek-
    > tips.com/viewthread.cfm?SQID=779567&SPID=41&page=1
    >
    > The problem was the ISA server had a certificate set in
    > its properties for all Incoming Web Requests. I changed
    > the certificate it was supposed to use and voila!
    >
    > Thought I would let you know in case you came up against
    > it again.
    >
    > Thanks,
    >
    > Nigel
    >
    >
    > >-----Original Message-----
    > >No clue. have you try a browse from netscape or other
    > browser ?
    > >have you try on a brand new connection ?
    > >do you have ISA or proxy server in front of your web
    > server ?
    > >
    > >and you might want to try IE groups, maybe experts can
    > help up.
    > >
    > >-- 
    > >Regards,
    > >Bernard Cheah
    > >http://support.microsoft.com/
    > >http://www.msmvps.com/bernard/
    > >
    > >
    > ><anonymous@discussions.microsoft.com> wrote in message
    > >news:b56701c40d6c$93c77d10$a001280a@phx.gbl...
    > >> Hi,
    > >>
    > >> Yes, I have rebooted the entire machine approximately
    > 10
    > >> times throughout this ordeal.
    > >>
    > >> Nige
    > >>
    > >> >-----Original Message-----
    > >> >One more things.. have you try restart IIS or reboot
    > >> server ?
    > >> >
    > >> >-- 
    > >> >Regards,
    > >> >Bernard Cheah
    > >> >http://support.microsoft.com/
    > >> >http://www.msmvps.com/bernard/
    > >> >
    > >> >
    > >> >"Nigel Moore" <nigel@mtec.com.au.discuss> wrote in
    > >> message
    > >> >news:e4c501c40ba9$7d690670$a301280a@phx.gbl...
    > >> >> Thank you for the reply. I have done all you
    > suggested
    > >> >> and it still shows up as the original certificate.
    > >> >>
    > >> >> Even if I right click on Default Web Site and Choose
    > >> >> properties -> Directory Security and choose "View
    > >> >> Certificate" it shows here the CORRECT one, however
    > >> when
    > >> >> I go to the site, the old one still shows up.
    > >> >>
    > >> >> I have gone through a couple of times getting a new
    > >> >> certificate issued from the certification authority
    > and
    > >> >> going through the whole process from scratch however
    > >> >> every single time the old SSL certificate is still
    > >> there
    > >> >> when I browse to the site..
    > >> >>
    > >> >> I even removed it completely from the Certificates
    > snap
    > >> >> in through MMC and it came back?
    > >> >>
    > >> >> Any more ideas before I throw the server out the
    > window
    > >> >> (it is on the 3rd story of a building :-)
    > >> >>
    > >> >>
    > >> >> >-----Original Message-----
    > >> >> >Weird. Have you try to remove the cert from IIS
    > MMC ?
    > >> >> >Try remove all certs then import the new cert using
    > >> this
    > >> >> method.
    > >> >> >How to Import a Server Certificate for Use in
    > Internet
    > >> >> Information Services
    > >> >> >5.0
    > >> >> >http://support.microsoft.com/?id=232137
    > >> >> >
    > >> >> >it apply to IIS 6.0 as well, while you in the cert
    > mmc
    > >> >> (local computer)
    > >> >> >under the personal folder, make sure you only has
    > the
    > >> >> new cert and old cert
    > >> >> >is not there.
    > >> >> >
    > >> >> >
    > >> >> >-- 
    > >> >> >Regards,
    > >> >> >Bernard Cheah
    > >> >> >http://support.microsoft.com/
    > >> >> >http://www.msmvps.com/bernard/
    > >> >> >
    > >> >> >
    > >> >> >"Nigel Moore" <nigel@remove-this.mtec.com.au>
    > wrote in
    > >> >> message
    > >> >> >news:de1a01c40ae5$ed8ff680$a101280a@phx.gbl...
    > >> >> >> Hi,
    > >> >> >>
    > >> >> >> I have a Small Business Server 2003 running IIS
    > >> 6.0. I
    > >> >> >> have been setting up Outlook Web Access. I
    > >> originally
    > >> >> >> installed the Certificate Authority and issued a
    > >> >> >> certificate for the server so I could access it
    > on
    > >> >> >> https://mail.server.com/exchange however now I
    > have
    > >> >> >> purchased a correct SSL certificate from
    > >> >> >> www.instantssl.com (whom I have used before on
    > >> another
    > >> >> >> server successfully). Now I have tried removing
    > the
    > >> old
    > >> >> >> certificate from Directory Security and adding
    > the
    > >> new
    > >> >> >> one. This works *only* if I access the site from
    > the
    > >> >> >> local machine (i.e. https://localhost/exchange).
    > If
    > >> I
    > >> >> >> access it locally, I can double click on the
    > >> padlock on
    > >> >> >> IE and the certificate shows correctly. However
    > if I
    > >> >> >> access it from externally (I have tried about 5
    > >> >> different
    > >> >> >> sites over about 2 months) I get the original
    > cached
    > >> >> >> certificate (which shows errors as it is not
    > >> trusted).
    > >> >> I
    > >> >> >> have so far done the following:
    > >> >> >>
    > >> >> >> 1. Reinstalled ISA Server
    > >> >> >> 2. Reinstalled IIS
    > >> >> >> 3. Reinstalled Exchange
    > >> >> >> 4. Removed Certificate Authority
    > >> >> >> 5. Removed all of the certificates I created.
    > >> >> >> 6. Reconfigured the Directory Security
    > >> approximately 20
    > >> >> >> times
    > >> >> >>
    > >> >> >> I am now at a loss as to what I can do next. The
    > SSL
    > >> >> >> authority where I purchased the certificate is
    > also
    > >> >> >> stuck. I can't find anywhere else that I can go
    > to
    > >> >> remove
    > >> >> >> the cached certificate.
    > >> >> >>
    > >> >> >> Can anyone point me in the right direction or
    > give
    > >> me
    > >> >> any
    > >> >> >> help? Any help would be greatly appreciated.
    > >> >> >
    > >> >> >
    > >> >> >.
    > >> >> >
    > >> >
    > >> >
    > >> >.
    > >> >
    > >
    > >
    > >.
    > >
    

  • Next message: Thomas: "IIS 6 Integrated Authentification problem"

    Relevant Pages

    • Re: SharePoint 3.0: problems with external access
      ... Here are the steps to publish a WSS 3.0 application behind ISA Server. ... Let's assume that you created a new WSS 3.0 application, that listens to port 80, and the host header is 'Intranet'. ... Go to IIS Manager and make sure that the IP address of the site is set to the IP address of the server. ... Run the wizard to create a new SSL certificate for the site. ...
      (microsoft.public.windows.server.sbs)
    • Re: Adding EXCH2007 SP1 box to existing EXCH2003 SP2 Org
      ... Certificates - going to be using a SAN Certificate like I have many times before. ... We are making this a virtual server (someone is going on-site on Thursday to install VMWare (which will kill everything on this box) and WIN2008 Server SP1 x64 and then I will install EXCH2007 SP1. ... as mentioned - ISA was not involved in any of those eight environments.... ...
      (microsoft.public.exchange.admin)
    • Re: Adding EXCH2007 SP1 box to existing EXCH2003 SP2 Org
      ... Certificates - going to be using a SAN Certificate like I have many times before. ... If the Exchange 2007 box is hosting mailboxes, it won't work as a front-end equivalent. ... We are making this a virtual server and WIN2008 Server SP1 x64 and then I will install EXCH2007 SP1. ... as mentioned - ISA was not involved in any of those eight environments.... ...
      (microsoft.public.exchange.admin)
    • RE: isa 2004 & external website access issue
      ... internal web sites are no longer accessible, ... Does each internal web server ... headers in ISA Server ... List' and click 'Connect to the internet' in the right panel. ...
      (microsoft.public.windows.server.sbs)
    • Re: Configuring SBS2003 for OWA and RWW
      ... And make sure certificate will not be ... On the Connection Type page, click Broadband, and then click Next. ... next to Preferred DNS server and next to ... If you are using ISA, please go to ISA management console, and navigate ...
      (microsoft.public.windows.server.sbs)