Welcome to MobyThreads.com!
FAQFAQ      ProfileProfile    Private MessagesPrivate Messages   Log inLog in
All support for the MobyThreads Threaded phpBB MOD can now be found on welsolutions at this forum

SSL Certificate over multiple servers

  
   Web Hosting and Web Master Forums (Home) -> IIS RSS
Next:  inetinfo.exe using 100% CPU  
Author Message
anonymous1839

External


Since: May 09, 2004
Posts: 1



(Msg. 1) Posted: Sun May 09, 2004 11:24 am
Post subject: SSL Certificate over multiple servers
Archived from groups: microsoft>public>inetserver>iis (more info?)
Can anyone advise!

I wish to run an SSL secure site over multiple web
servers. I generated an CSR on one web server and
received the certificate back from verisign and installed
on this server. I then backed up the cert & private key
and imported this into the other servers. When I open
the certificate MMC snapin and view the certificate it
displays "This Certificate has expired or is not yet
Valid" and this is the same for all servers I have
imported the Cert into. The original server Certificate
is fine/valid.

can anyone point me as to where I am going wrong with
this Implementation!!

The setup is W2k IIS5, these servers run multiple site
but this is the only SSL site setup.

Many Thanks!!

 >> Stay informed about: SSL Certificate over multiple servers 
Back to top
Login to vote
andrey

External


Since: Apr 12, 2004
Posts: 214



(Msg. 2) Posted: Mon May 10, 2004 1:21 pm
Post subject: Re: SSL Certificate over multiple servers [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
John Noel wrote:

 > Can anyone advise!
 >
 > I wish to run an SSL secure site over multiple web
 > servers. I generated an CSR on one web server and
 > received the certificate back from verisign and installed
 > on this server. I then backed up the cert & private key
 > and imported this into the other servers. When I open
 > the certificate MMC snapin and view the certificate it
 > displays "This Certificate has expired or is not yet
 > Valid" and this is the same for all servers I have
 > imported the Cert into. The original server Certificate
 > is fine/valid.
 >
 > can anyone point me as to where I am going wrong with
 > this Implementation!!
 >
 > The setup is W2k IIS5, these servers run multiple site
 > but this is the only SSL site setup.
 >
 > Many Thanks!!

Are you browsing another ssl sites via a different URL ? If yes - alas,
that's a behavior by design. Cert is issued per a URL. In other words,
if you purchased a cert for <a style='text-decoration: underline;' href="https://www.domain.name," target="_blank">https://www.domain.name,</a> you will receive a
security prompt trying to use it with <a style='text-decoration: underline;' href="https://www2.domain.name." target="_blank">https://www2.domain.name.</a>

Solution:

1. To run a few web servers in a Network Load Balance mode (all Web
sites are responding on the same name)

2. To purchase a so-called "wild-card" certificate, which would be valid
for anything looks like <a style='text-decoration: underline;' href="https://" target="_blank">https://</a>*.domain.name

-Andrey<!-- ~MESSAGE_AFTER~ -->

 >> Stay informed about: SSL Certificate over multiple servers 
Back to top
Login to vote
yonlinemanghn1

External


Since: Jan 23, 2004
Posts: 206



(Msg. 3) Posted: Fri May 21, 2004 4:20 am
Post subject: RE: SSL Certificate over multiple servers [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
Hello,
It could be possible that the other servers do not have the intermediate
certificates installed or have old/expired intermediate certificates. If
you look at the Certification path in the properties dialog for this new
certificate, do you see any errors?
You might want to try running SSLDiag after binding the new certificate to
a site and checking the log for any errors.
<a style='text-decoration: underline;' href="http://www.microsoft.com/downloads/details.aspx?FamilyID=cabea1d0-5a10-41bc-" target="_blank">http://www.microsoft.com/downloads/details.aspx?FamilyID=cabea1d0-5a10-41bc-</a>
83d4-06c814265282&DisplayLang=en
If you like, you can post the ssldiag output here for reviewal.
Hope this helps!

Thanks,
Yogita Manghnani
Microsoft Developer Support
Internet Information Server

*********************************************************************
  >>Please do not send email directly to this alias. This is an online
account name for newsgroup participation only.<<

This posting is provided "AS IS" with no warranties, and confers no rights.
You assume all risk for your use.

© 2003 Microsoft Corporation. All rights reserved.
*********************************************************************<!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: SSL Certificate over multiple servers 
Back to top
Login to vote
Display posts from previous:   
Related Topics:
multiple web servers under one IP - i am running one IIS web server in a small office, and am setting up another web server running for testing purposes. if the first web server defaults at port 80 on my firewall, how should I configure access to the second web server? thanks

Multiple IIS servers stopping at once - Awhile ago I posted regarding a concatenation lock - that's now fixed. However we're now experiencing intermittent events where THREE seperate IIS servers [1]all stop responding similtaneously. There does not seem to be any rhyme or reason to this, I..

how to run multiple ftp servers on 1 public ip ? - Hi, At the moment im using NAT to direct 20/21 to my FTP server. If i wanted to run another FTP server could i ? - i only have one public ip. - i know you can use a reverse proxy to host multiple IIS machines (each with HTTP sites) on 80 using one..

multiple pop3 servers - Hi can i install multiple domains names ( i mean for emails) with the FEATURE pop3 sever services ,on the same server that's have windows 2003 server and just one public ip address. it's a possible to do that

CDO for W2K, LogonSMTP & Multiple SMTP Servers on the same.. - Hello I have three (IIS) SMTP Servers set-up on my server, all listening on different IP addresses. One of them is configured to receive incoming mail. This is working fine and messages are appearing in the drop folder within it's mail root. I wish t...
   Web Hosting and Web Master Forums (Home) -> IIS All times are: Pacific Time (US & Canada) (change)
Page 1 of 1

 
 You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum



[ Contact us | Terms of Service/Privacy Policy ]