Re: Web server delivers wrong SSL certificate information

Ken,
Thank you for the tip. I looked at the metabase and it does show the correct
SSLCertHash value. But when I view the certificate when I go to the web site,
I am seeing the old certificate's information that is expired.


--
Jerry


"Ken Schaefer" wrote:

Look in the metabase to see what the SSLCertHash value is for that website.
It should match the thumbprint value of the certificate you want to use.

Cheers
Ken

"Jerry Hodson" <JerryHodson@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:62F1A8E6-BA24-4A7F-91A0-BA42C9FF81EA@xxxxxxxxxxxxxxxx
Completely befuddled here.

Running IIS 6.0 on my web server for many years now and have never had any
issues when replacing expiring certificate file with new ones, until now.

When I hit the web site, the certificate that I can view is the old
expired
one. Not the new one that I replced it with.

Any ideas would be welcomed.
--
Jerry


.

Relevant Pages

  • [NT] Flaw in Certificate Enrollment Control Could Allow Deletion of Digital Certificates
    ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... Certificate Enrollment Control, the purpose of which is to allow web-based ...
    (Securiteam)
  • Re: Embedding Simple MFC GUI app into website
    ... The problem with security is that so many people say "it doesn't matter". ... particular technology is "evil" goes beyond common sense and increases ... Since you must obtain a certificate for code signing from the trusted ... use it for a general purpose web site as we have all discussed, ...
    (microsoft.public.vc.mfc)
  • Re: Embedding Simple MFC GUI app into website
    ... particular technology is "evil" goes beyond common sense and increases ... ActiveX, in particular, is an antipattern for security. ... Since you must obtain a certificate for code signing from the trusted ... use it for a general purpose web site as we have all discussed, ...
    (microsoft.public.vc.mfc)
  • RE: Publishing Companyweb for external access on SBS2003 R2 With I
    ... would like to show out the recommended steps to publish companyweb. ... To publish companyweb in ISA Server 2004, we can simply run the CEICW ... "Allow access to only the following Web site services from the internet" ... On the "Web Server Certificate" page, choose to create a new Web server ...
    (microsoft.public.windows.server.sbs)
  • RE: Getting rid of a rogue SSl certificate
    ... > Please follow the steps below to check the certificate on ISA. ... > server name, select prop. ... network, firewall, secure Web site, and e-mail. ...
    (microsoft.public.windows.server.sbs)