 |
|
|
|
Next: iis 6 versus iis 5
|
| Author |
Message |
External
Since: Nov 19, 2003
Posts: 7
|
(Msg. 1) Posted: Wed Nov 19, 2003 7:37 pm
Post subject: IIS 5 and SSL
Archived from groups: microsoft>public>inetserver>iis (more info?)
|
|
|
I have an IIS 5 server with an SSL certificate installed.
I can connect to it just fine by putting in https:// and the server.
But if I try to make SSL compulsory, then I get a page saying "Secure
Channel Required" - via SSL.
View | Source on that page is:
<html><head><title>Secure Channel Required</title></head>
<body><h1>Secure Channel Required</h1>This Virtual Directory requires a
browser that supports the configured encryption options.</body></html>
File | Properties gets me a connection type of:
TLS 1.0, RC4 with 128 bit encryption (High); RSA with 1024 bit exchange
I've currently resolved this by blocking port 80 on the firewall, so all
connections are SSL, but I'd like to get IIS configured correctly.
-- Richard Gadsden |
|
| Back to top |
|
 | |
External
Since: Nov 13, 2003
Posts: 47
|
(Msg. 2) Posted: Wed Nov 19, 2003 7:37 pm
Post subject: Re: IIS 5 and SSL [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
|
|
|
do you have "all unassigned" as the ip for the site?
"Richard Gadsden" <richard.gadsden.TakeThisOut@cobbetts.co.uk> wrote in message
news:memo.20031119163702.1960A@crgg.cobbetts.co.uk...
> I have an IIS 5 server with an SSL certificate installed.
>
> I can connect to it just fine by putting in <a style='text-decoration: underline;' href="https://" target="_blank">https://</a> and the server.
>
> But if I try to make SSL compulsory, then I get a page saying "Secure
> Channel Required" - via SSL.
>
> View | Source on that page is:
>
> <html><head><title>Secure Channel Required</title></head>
> <body><h1>Secure Channel Required</h1>This Virtual Directory requires a
> browser that supports the configured encryption options.</body></html>
>
> File | Properties gets me a connection type of:
>
> TLS 1.0, RC4 with 128 bit encryption (High); RSA with 1024 bit exchange
>
> I've currently resolved this by blocking port 80 on the firewall, so all
> connections are SSL, but I'd like to get IIS configured correctly.
>
> -- Richard Gadsden<!-- ~MESSAGE_AFTER~ --> |
|
| Back to top |
|
| |
External
Since: Nov 19, 2003
Posts: 7
|
(Msg. 3) Posted: Wed Nov 19, 2003 7:56 pm
Post subject: Re: IIS 5 and SSL [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
|
|
|
Yes, I do. If I change it to the IP address of the server, then I get
"Site Not Found" No website is found at this address when I connect via
<a style='text-decoration: underline;' href="https://" target="_blank">https://</a> and it still works via http:
In article <#PfFUyrrDHA.3748@TK2MSFTNGP11.phx.gbl>,
consultant_mcngp_removepants RemoveThis @yahoo.com (Consultant) wrote:
> do you have "all unassigned" as the ip for the site?
>
>
> "Richard Gadsden" <richard.gadsden RemoveThis @cobbetts.co.uk> wrote in message
> news:memo.20031119163702.1960A@crgg.cobbetts.co.uk...
> > I have an IIS 5 server with an SSL certificate installed.
> >
> > I can connect to it just fine by putting in <a style='text-decoration: underline;' href="https://" target="_blank">https://</a> and the server.
> >
> > But if I try to make SSL compulsory, then I get a page saying "Secure
> > Channel Required" - via SSL.
> >
> > View | Source on that page is:
> >
> > <html><head><title>Secure Channel Required</title></head>
> > <body><h1>Secure Channel Required</h1>This Virtual Directory requires
> > a
> > browser that supports the configured encryption options.</body></html>
> >
> > File | Properties gets me a connection type of:
> >
> > TLS 1.0, RC4 with 128 bit encryption (High); RSA with 1024 bit
> > exchange
> >
> > I've currently resolved this by blocking port 80 on the firewall, so
> > all
> > connections are SSL, but I'd like to get IIS configured correctly.
> >
> > -- Richard Gadsden
>
>
><!-- ~MESSAGE_AFTER~ --> >> Stay informed about: IIS 5 and SSL |
|
| Back to top |
|
| |
External
Since: Nov 19, 2003
Posts: 7
|
(Msg. 4) Posted: Wed Nov 19, 2003 7:57 pm
Post subject: Re: IIS 5 and SSL [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
|
|
|
Yes, I do. If I change it to the IP address of the server, then I get
"Site Not Found" No website is found at this address when I connect via
<a style='text-decoration: underline;' href="https://" target="_blank">https://</a> and it still works via http:
In article <#PfFUyrrDHA.3748@TK2MSFTNGP11.phx.gbl>,
consultant_mcngp_removepants.TakeThisOut@yahoo.com (Consultant) wrote:
> do you have "all unassigned" as the ip for the site?
>
>
> "Richard Gadsden" <richard.gadsden.TakeThisOut@cobbetts.co.uk> wrote in message
> news:memo.20031119163702.1960A@crgg.cobbetts.co.uk...
> > I have an IIS 5 server with an SSL certificate installed.
> >
> > I can connect to it just fine by putting in <a style='text-decoration: underline;' href="https://" target="_blank">https://</a> and the server.
> >
> > But if I try to make SSL compulsory, then I get a page saying "Secure
> > Channel Required" - via SSL.
> >
> > View | Source on that page is:
> >
> > <html><head><title>Secure Channel Required</title></head>
> > <body><h1>Secure Channel Required</h1>This Virtual Directory requires
> > a
> > browser that supports the configured encryption options.</body></html>
> >
> > File | Properties gets me a connection type of:
> >
> > TLS 1.0, RC4 with 128 bit encryption (High); RSA with 1024 bit
> > exchange
> >
> > I've currently resolved this by blocking port 80 on the firewall, so
> > all
> > connections are SSL, but I'd like to get IIS configured correctly.
> >
> > -- Richard Gadsden
>
>
><!-- ~MESSAGE_AFTER~ --> >> Stay informed about: IIS 5 and SSL |
|
| Back to top |
|
| |
External
Since: Aug 25, 2003
Posts: 244
|
(Msg. 5) Posted: Thu Nov 20, 2003 8:21 am
Post subject: Re: IIS 5 and SSL [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
|
|
|
Hi Richard,
Thank you for replying!
Does your site use host header? If so, the host header is not supported by SSL. Before dispatching the request from Internet, IIS needs to know
where the request should be sent to. But in SSL, all the requests are encrypted so that IIS doesn't know how to transfer them. There is one kb
article introducing this issue for you. Please go to:
187504 HTTP 1.1 Host Headers Are Not Supported When You Use SSL
http://support.microsoft.com/?id=187504
Furthremore, you can also use SSL disgnostics tool released by Microsoft which may provide some assistance for you on the troubleshooting. The
tool is available from Microsoft.com. Please go to:
http://www.microsoft.com/downloads/details.aspx?FamilyID=cabea1d0-5a10...bc-83d4
Please feel free to let me know if you have any further questions.
Does this answer your question? Thank you for using Microsoft NewsGroup!
Wei-Dong Xu
Microsoft Product Support Services
Get Secure! - www.microsoft.com/security
This posting is provided "AS IS" with no warranties, and confers no rights. >> Stay informed about: IIS 5 and SSL |
|
| Back to top |
|
| |
External
Since: Nov 19, 2003
Posts: 7
|
(Msg. 6) Posted: Fri Nov 21, 2003 2:51 pm
Post subject: Re: IIS 5 and SSL [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
|
|
|
In article <AMys1YyrDHA.3644 RemoveThis @cpmsftngxa07.phx.gbl>,
v-wdxu RemoveThis @online.microsoft.com (Wei-Dong Xu [MSFT]) wrote:
> Hi Richard,
>
> Thank you for replying!
>
> Does your site use host header?
The site with SSL doesn't use host header, but other sites on the server
do.
> Furthremore, you can also use SSL disgnostics tool released by
> Microsoft which may provide some assistance for you on the
> troubleshooting. The tool is available from Microsoft.com. Please go to:
<font color=purple> > <a style='text-decoration: underline;' href="http://www.microsoft.com/downloads/details.aspx?FamilyID=cabea1d0-5a10-4</font" target="_blank">http://www.microsoft.com/downloads/details.aspx?FamilyID=cabea1d0-5a10...lt;/fon</a>>
> 1bc-83d4-06c814265282&DisplayLang=en
Not seeing any errors on this. It's really strange in that I can block
port 80 at the firewall and the SSL connection still works fine over port
443, but if I make it compulsory, then you get a message over the SSL
channel telling you that the SSL is mandatory.
-- Richard<!-- ~MESSAGE_AFTER~ --> >> Stay informed about: IIS 5 and SSL |
|
| Back to top |
|
| |
External
Since: Aug 25, 2003
Posts: 244
|
(Msg. 7) Posted: Sat Nov 22, 2003 8:03 am
Post subject: Re: IIS 5 and SSL [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
|
|
|
Hi richard,
Thank you for replying!
From my understanding to your issue now, it seems that the compulsary SSL means specifying "Require secure channel(SSL)" and select "Require
128-bit encryption" in IIS MMC. Is that correct?
My suggestion for you now is that you can use the WFetch of IIS6 resource kit to test your connection to your server. The WFetch can trace the
connection detail. You can connect the server with SSL connection or no SSL connection. If you are not familiar with these HTTP trace, you can
paste these trace in the community or send me one mail.
Please feel free to let me know if you have any questions.
Thank you for using Microsoft NewsGroup!
Wei-Dong Xu
Microsoft Product Support Services
Get Secure! - www.microsoft.com/security
This posting is provided "AS IS" with no warranties, and confers no rights. >> Stay informed about: IIS 5 and SSL |
|
| Back to top |
|
| |
External
Since: Nov 19, 2003
Posts: 7
|
(Msg. 8) Posted: Mon Nov 24, 2003 2:40 pm
Post subject: Re: IIS 5 and SSL [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
|
|
|
In article <7N#I4XLsDHA.3696@cpmsftngxa07.phx.gbl>,
v-wdxu DeleteThis @online.microsoft.com (Wei-Dong Xu [MSFT]) wrote:
> From my understanding to your issue now, it seems that the compulsary
> SSL means specifying "Require secure channel(SSL)" and select "Require
> 128-bit encryption" in IIS MMC. Is that correct?
Pretty much - it doesn't matter whether I select "Require 128-bit
encryption or not; I get the same issues".
> My suggestion for you now is that you can use the WFetch of IIS6
> resource kit to test your connection to your server. The WFetch can
> trace the connection detail. You can connect the server with SSL
> connection or no SSL connection. If you are not familiar with these
> HTTP trace, you can paste these trace in the community or send me one
> mail.
I have IIS5 (Windows 2000 Server), not IIS6 - where can I get this WFetch
application?
-- Richard<!-- ~MESSAGE_AFTER~ --> >> Stay informed about: IIS 5 and SSL |
|
| Back to top |
|
| |
External
Since: Aug 25, 2003
Posts: 244
|
(Msg. 9) Posted: Tue Nov 25, 2003 9:01 am
Post subject: Re: IIS 5 and SSL [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
|
|
|
Hi richard,
For WFetch, there is one KB article regarding this tool. Please go to:
284285 HOW TO: Use Wfetch.exe to Troubleshoot HTTP Connections
http://support.microsoft.com/?id=284285
If you are not familiar with the HTTP trace, please post them in the newsgroup or mail them to me directly.
Please feel free to let me know if you have any further questions.
Thank you for using Microsoft NewsGroup!
Wei-Dong Xu
Microsoft Product Support Services
Get Secure! - www.microsoft.com/security
This posting is provided "AS IS" with no warranties, and confers no rights. >> Stay informed about: IIS 5 and SSL |
|
| Back to top |
|
| |
External
Since: Nov 19, 2003
Posts: 7
|
(Msg. 10) Posted: Tue Nov 25, 2003 7:36 pm
Post subject: Re: IIS 5 and SSL [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
|
|
|
In article <STMUkmxsDHA.3428.RemoveThis@cpmsftngxa07.phx.gbl>,
v-wdxu.RemoveThis@online.microsoft.com (Wei-Dong Xu [MSFT]) wrote:
> Hi richard,
>
> For WFetch, there is one KB article regarding this tool. Please go to:
> 284285 HOW TO: Use Wfetch.exe to Troubleshoot HTTP Connections
<font color=purple> > <a style='text-decoration: underline;' href="http://support.microsoft.com/?id=284285</font" target="_blank">http://support.microsoft.com/?id=284285</font</a>>
>
> If you are not familiar with the HTTP trace, please post them in the
> newsgroup or mail them to me directly.
>
> Please feel free to let me know if you have any further questions.
>
> Thank you for using Microsoft NewsGroup!
Yerk!
Found the problem.
Someone else had installed Citrix Secure Gateway on the server. While
this does allow HTTPS connections to the server, it then passes them
through to IIS as HTTP connections - which is why I was getting a nice
encrypted message telling me that I had to connect in an encrypted
fashion.
Grrrrrrrrrr!
-- Richard.<!-- ~MESSAGE_AFTER~ --> >> Stay informed about: IIS 5 and SSL |
|
| Back to top |
|
| |
External
Since: Aug 25, 2003
Posts: 244
|
(Msg. 11) Posted: Wed Nov 26, 2003 6:27 am
Post subject: Re: IIS 5 and SSL [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
|
|
|
|
|
| Back to top |
|
| |
|
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
|
|
|
FAQ
Profile
Private Messages
Log in
