Re: IIS 6.0, Host Headers and SSL

From: Bernard Cheah [MVP] (qbernard_at_hotmail.com.discuss)
Date: 10/27/05


Date: Thu, 27 Oct 2005 16:13:43 +0800

So both site can't be start at all?
Sounds like something thing is binding to port 443. Can you remove all
settings and start 1 site with port 443?

next, if it's working, then reconfigure host header for the two ssl site,
then try
httpcfg query ssl

post the result here.

-- 
Regards,
Bernard Cheah
http://www.iis-resources.com/
http://www.iiswebcastseries.com/
http://www.msmvps.com/bernard/
"Tymbow" <Tymbow@discussions.microsoft.com> wrote in message 
news:24A4563E-739A-4AF0-9DC3-3012ABA225E5@microsoft.com...
>I have tried it with an IP address as we;; as the port and host header. The
> sites both still work however the error event is still logged.
>
> Regrads,
> Tim.
>
> "Bernard Cheah [MVP]" wrote:
>
>> I would specify the binding IP as well.
>> "ip,ip.ip.ip:443:mail.company.com"
>>
>>
>> -- 
>> Regards,
>> Bernard Cheah
>> http://www.iis-resources.com/
>> http://www.iiswebcastseries.com/
>> http://www.msmvps.com/bernard/
>>
>>
>> "Tymbow" <Tymbow@discussions.microsoft.com> wrote in message
>> news:95374434-449F-447C-AEF5-F7167F19AA23@microsoft.com...
>> > The certificate is allocated to *.company.com, and the host headers in 
>> > use
>> > are www.company.com and mail.company.com. From the metabase the
>> > SecureBindings are as follows:
>> >
>> > SecureBindings=":443:mail.company.com" and
>> > SecureBindings=":443:www.company.com"
>> >
>> > I have added the name company in place of the real name to protect the
>> > innocent but the settings are otherwise exactly as they really are.
>> >
>> > Regards,
>> > Tim.
>> >
>> > "Bernard Cheah [MVP]" wrote:
>> >
>> >> 1) What are the url for the two sites?
>> >> 2) What's the secure binding info for two sites ?
>> >>
>> >>
>> >> -- 
>> >> Regards,
>> >> Bernard Cheah
>> >> http://www.iis-resources.com/
>> >> http://www.iiswebcastseries.com/
>> >> http://www.msmvps.com/bernard/
>> >>
>> >>
>> >> "Tymbow" <Tymbow@discussions.microsoft.com> wrote in message
>> >> news:884CBFA2-50DA-4DFE-BB49-1AFD0B578708@microsoft.com...
>> >> >I have a client that for various reasons can only have one IP 
>> >> >address,
>> >> > however they need to seperate SSL enabled web sites. I followed the
>> >> > Technet
>> >> > Article at
>> >> > http://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/596b9108-b1a7-494d-885d-f8941b07554c.mspx.
>> >> >
>> >> > The wilcard certificate has been assigned to both web sitesand the 
>> >> > IIS
>> >> > Metabase SecureBindings set with the correct SSL host header for 
>> >> > each
>> >> > site.
>> >> > All apppears to work correctly - requests go to the right site based 
>> >> > on
>> >> > the
>> >> > URL, and all are being encrypted correctly.
>> >> >
>> >> > The issue I have is that when IIS is restarted I get the following
>> >> > error
>> >> > in
>> >> > the System event log:
>> >> >
>> >> > Source: W3SVC
>> >> > EventID: 1113
>> >> >
>> >> > One of the IP/Port combinations for site 'xxxxxxxxx' has already be
>> >> > configured to be used by another site.  The other site's SSL
>> >> > configuration
>> >> > will be used.
>> >> >
>> >> > Is this an indication of a problem (everything seems to work), or is 
>> >> > it
>> >> > just
>> >> > a hangover from the way SSL Host Headers were implemented in Windows
>> >> > Server
>> >> > 2003 SP1?
>> >>
>> >>
>> >>
>>
>>
>> 


Relevant Pages

  • Re: Unable to send photos
    ... Your settings for Comcast are incorrect. ... You are using port 25 with SSL, it should be port 587 without SSL. ... Your server has unexpectedly terminated the connection. ...
    (microsoft.public.windows.vista.mail)
  • Re: Cant send emails through outlook 2003
    ... Please verify that the port and SSL information ... To access these settings close this dialog, ... Using port 25 outlook could not connect to the outgoing mail server. ... The problem could be the server name or port, or your server may not support ...
    (microsoft.public.outlook.general)
  • Re: Im new to Outlook and cannot send or receive email. Please help
    ... Does your server require SSL? ... The problem could be the server name or port, ... Verify your port and SSL settings in More ...
    (microsoft.public.outlook)
  • Re: Need help pls :P
    ... Do you have multiple site on the same machine, if so add a host header to ... > implementing the use of SSL protocol. ... > server, port 443 works perfectly. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Problem with Entourage 2004 - Entourage constantly crashes
    ... Have you changed your POP settings to match what Yahoo suggests? ... Make sure to also in the advanced settings to turn ON SSL, and make sure the port is set to 995 ...
    (microsoft.public.mac.office.entourage)