Groups | Blog | Home
all groups > iis security > august 2004 >

iis security : SSL


kiki
8/18/2004 12:54:08 PM
Last week we upgrade our Web server from Nt4.0 to W2k
server and IIS5.0. I imported the Certificate key to the
new server. Now we're getting the following messsage: The
security certificate has expired or is not yet valid.
The Certificate is valid until 03/03/06
I checked the time on my new Server, and it looks OK. Any
ideas, please.
Alun Jones [MSFT]
8/18/2004 2:35:58 PM
[quoted text, click to view]

Which particular program is giving you that message? Is it at the browser,
or at the server?

Remember that the browser is going to compare the start and end dates of
your certificate against its own current date and time, not against your
server's current date and time.

Also, check, as the message implies, the start date of your certificate's
validity through the Certificates snap-in for MMC. Often, certificates are
created with a valid period of one year - one year prior to your
certificate's expiry date would be 03/03/05, which hasn't yet happened.

Alun.
~~~~

anonymous NO[at]SPAM discussions.microsoft.com
8/19/2004 8:00:11 AM

[quoted text, click to view]
server too.
Mike Singer
8/20/2004 7:11:37 AM
Are you using the Verisign 128 bit cert? If so, you there is an
intermediate certificate that expired that you will have to replace on your
web server. See https://www.verisign.com/support/site/caReplacement.html
for details.

You can verify that this is the problem by surfing to your site from IE and
doing a file/properties/certficates. Go to the Certification path tab. The
cert in question should have a Red X in the description.

[quoted text, click to view]

AddThis Social Bookmark Button