Re: SSL sites don't come up

From: Miha Pihler [MVP] (mihap-news_at_atlantis.si)
Date: 02/10/05


Date: Thu, 10 Feb 2005 15:40:01 +0100

Hi,

Next thing you can do is run SSL Diag tool. That might tell us more where
the problem is...

You can get SSL Diag here:

SSL Diagnostics Version 1.0 (x86)
http://www.microsoft.com/downloads/details.aspx?FamilyID=cabea1d0-5a10-41bc-83d4-06c814265282&DisplayLang=en

-- 
Mike
Microsoft MVP - Windows Security
"Mike St.Onge" <MikeStOnge@discussions.microsoft.com> wrote in message 
news:6C0964D6-034C-4ACF-95C0-EEC2C125EF3F@microsoft.com...
> OK, I checked with the guy that issues the certs.  He's using Netscape
> Certificates to issue the cert.  There is no option specifying what type 
> of
> cert he is issueing.  I looked over the whole thing with him.
>
> Does this help any?  Any other ideas?
>
> "Miha Pihler [MVP]" wrote:
>
>> If the issuer did not select the appropriate template (e.g. selected User
>> template instead of Web Server template) this  certificate will not work 
>> on
>> IIS.
>>
>> -- 
>> Mike
>> Microsoft MVP - Windows Security
>>
>> "Mike St.Onge" <MikeStOnge@discussions.microsoft.com> wrote in message
>> news:19F643A1-96E6-4434-8F30-C17A4AA50FB8@microsoft.com...
>> > Thats a good question, since I did not issue the certificate.  Let me 
>> > ask
>> > the
>> > issuer.
>> >
>> > Would that cause this sort of problem?
>> >
>> > "Miha Pihler [MVP]" wrote:
>> >
>> >> Hi,
>> >>
>> >> No, if you used internal CA then it should be OK...
>> >>
>> >> When issuing the certificate, did you select the correct certificate
>> >> template (Web Server) template? Here is an example:
>> >> http://freeweb.siol.net/mpihler/webcert.jpg
>> >>
>> >> -- 
>> >> Mike
>> >> Microsoft MVP - Windows Security
>> >>
>> >> "Mike St.Onge" <MikeStOnge@discussions.microsoft.com> wrote in message
>> >> news:08A2062E-D659-4E1A-AA67-70DEB324867C@microsoft.com...
>> >> >I am running IIS 6.  Yes, the SSL port is 443.
>> >> >
>> >> > The certificate.  Hmmm ...   I had to cut and paste some stuff from 
>> >> > an
>> >> > internal CA and rename the .txt file to a .cer.  Should I have named 
>> >> > it
>> >> > a
>> >> > .pfx?
>> >> >
>> >> > "Miha Pihler [MVP]" wrote:
>> >> >
>> >> >> Hi Mike,
>> >> >>
>> >> >> Which version of IIS do you have? IIS 5? IIS 6?
>> >> >>
>> >> >> Is SSL port assigned to your site? It should be TCP port 443.
>> >> >>
>> >> >> What was a file extension on your certificate? Was it a .pfx or 
>> >> >> .cer?
>> >> >>
>> >> >> -- 
>> >> >> Mike
>> >> >> Microsoft MVP - Windows Security
>> >> >>
>> >> >>
>> >> >> "Mike St.Onge" <MikeStOnge@discussions.microsoft.com> wrote in 
>> >> >> message
>> >> >> news:6848EA0E-67BF-4BF4-A0F6-93A8C8E8A91E@microsoft.com...
>> >> >> >I recently downloaded an SSL certificate, imported it fine and
>> >> >> >enabled
>> >> >> >SSL
>> >> >> >on
>> >> >> > the website.  Now I cannot access the website.  I don't get an 
>> >> >> > error
>> >> >> > or
>> >> >> > anything.  It just never comes up.
>> >> >> >
>> >> >> > I am complete SSL \ IIS newbie.  Anyone have any suggestions on 
>> >> >> > what
>> >> >> > to
>> >> >> > check?  I followed all the documentation and it *should* work.
>> >> >>
>> >> >>
>> >> >>
>> >>
>> >>
>> >>
>>
>>
>> 


Relevant Pages

  • Re: Cert Server - Changed Enterprise CA
    ... So as per the Instructions I added an IPSec Cert Template and added that to ... the Default Group Policy. ... 323342 How to install a certificate for use with IP Security in Windows ...
    (microsoft.public.win2000.active_directory)
  • Re: Cert Server - Changed Enterprise CA
    ... So I removed it and readded it, and it looks like I get a new Cert. ... Automatic Certificate Request entry? ... Computer Template? ...
    (microsoft.public.win2000.active_directory)
  • Re: Win2003 CA certificates with Outlook2003
    ... Template field is USER. ... > becasue the private key is NOT marked exportable. ... Since you can see the certificate in MMC, can you double click on the ... >> There is nothing we can do to get Outlook to see the cert generated from ...
    (microsoft.public.windows.server.security)
  • Re: Cert Server - Changed Enterprise CA
    ... please remove the original Computer Certificate in default GPO since ... Computer Template? ... To manually request a Cert, you can refer to following article: ... Configure the Automatic Certificate Request Policy ...
    (microsoft.public.win2000.active_directory)
  • RE: Certsrv and Autoenrollment problem
    ... Thank you for posting to the SBS Newsgroup. ... so it will not be instantiated on the template ... Certificate Authority snap-in will show the templates in the Certificate ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)