RE: Multiple Sites running same code, w/SSL.

From: Showkat Lone [MSFT] (showkatl_at_online.microsoft.com)
Date: 11/24/04

  • Next message: James Robetson: "IIS Security"
    Date: Wed, 24 Nov 2004 21:03:58 GMT
    
    

    Hi Jeff,
    Host headers are not supported with SSL
    Please go through this article
    187504 HTTP 1.1 Host Headers Are Not Supported When You Use SSL
    http://support.microsoft.com/?id=187504

    Thanks
    Showkat[MSFT]

    --------------------
    >From: iiisystems@yahoo.com (Jeffery Anti)
    >Newsgroups: microsoft.public.inetserver.iis.security
    >Subject: Multiple Sites running same code, w/SSL.
    >Date: 24 Nov 2004 11:54:49 -0800
    >Organization: http://groups.google.com
    >Lines: 41
    >Message-ID: <93a6158e.0411241154.6b1c841@posting.google.com>
    >NNTP-Posting-Host: 63.83.28.100
    >Content-Type: text/plain; charset=ISO-8859-1
    >Content-Transfer-Encoding: 8bit
    >X-Trace: posting.google.com 1101326089 27370 127.0.0.1 (24 Nov 2004
    19:54:49 GMT)
    >X-Complaints-To: groups-abuse@google.com
    >NNTP-Posting-Date: Wed, 24 Nov 2004 19:54:49 +0000 (UTC)
    >Path:
    cpmsftngxa10.phx.gbl!TK2MSFTFEED02.phx.gbl!tornado.fastwebnet.it!tiscali!new
    sfeed1.ip.tiscali.net!news.glorb.com!postnews.google.com!not-for-mail
    >Xref: cpmsftngxa10.phx.gbl microsoft.public.inetserver.iis.security:15578
    >X-Tomcat-NG: microsoft.public.inetserver.iis.security
    >
    >I have an IIS 5.0 server hosting multiple sites that point to the same
    >code base. The host is the only part of the FQDN that changes per
    >customer. The domain for all the sites will always be samedomain.com.
    >All the sites resolve to the same IP so I use Host Header Name in IIS
    >to direct traffic. I know this isn't the best way, but it's what I
    >inherited and I have to make due for now.
    >
    >"cust1" requires SSL, and "cust2" does not.
    >
    >Example:
    >
    >Site in IIS:
    >cust1.samedomain.com
    >(SSL ON)
    >home directory is /inetpub/mastersite
    >
    >Site in IIS:
    >cust2.samedomain.com
    >(SSL OFF)
    >home directory is /inetpub/mastersite
    >
    >Hitting https://cust1.samedomain.com works properly
    >Hitting http://cust2.samedomain.com works properly
    >
    >Now here's the problem:
    >Hitting https://cust2.samedomain.com results in the end user being
    >presented w/a Certificate acceptance claiming the cert is not valid
    >for this site. There is NO cert setup for this site, only cust1 site
    >has a cert installed. For some reason IIS is attempting to direct all
    >https traffic to cust1 site regardless of the host name... it should
    >just say "no web site is configured blah".
    >
    >How do I resolve this?
    >
    >BTW: In IIS/Web Site/Web Site Identification/Advanced/
    >cust1.samedomain.com:80 is the only entry for the site
    >cust1.samedomain.com, and 443 is the only listing in "Multiple SSL
    >Identities"
    >
    >Thanks all.
    >-Jeff
    >


  • Next message: James Robetson: "IIS Security"

    Relevant Pages

    • Re: ** READ THIS BEFORE POSTING - answers to frequently asked questions 2003.08.15
      ... Here's how to enable SSL in IIS 5.0, not sure if 5.1 is different. ... XP comes with a different mini-IIS MMC that is confusing to me and does not ... Regarding your cert question, you have a choice of using the test cert from ...
      (microsoft.public.inetserver.iis.security)
    • Re: makecert
      ... You do need to have IIS installed in order to use this tool. ... I wouldn't worry about anything in IIS getting hosed unless you had SSL ... that in the IIS MMC by putting the previous cert back. ... You can then import it into the personal store for the ADAM service account ...
      (microsoft.public.windows.server.active_directory)
    • Re: IIS 6 and SSL
      ... SSL cert binding is specific to a IP:Port and does not support host headers. ... If it is internal and you control all clients accessing the website, ...
      (microsoft.public.inetserver.iis)
    • Re: SSL and OWA
      ... I just used metabase explorer to make sure I was importing the cert into the ... IIS is where most of the work ... I've attempted to enable the ssl, run iisreset that recheck use forms based ... auth in the exchange virtual server properties in exchange manager and I get ...
      (microsoft.public.exchange.admin)
    • Re: Installing multiple SSL certificates....
      ... Note that this is not really "IIS does not support SSL with host headers", ... >> I am currently hosting several web sites on a Win 2k3 server with IIS ...
      (microsoft.public.security)