Groups | Blog | Home
all groups > iis security > november 2005 >

iis security : SSL question


Miha Pihler [MVP]
11/2/2005 12:00:00 AM
In IIS 6 SP1 you can actually tie SSL to Host Headers...

Configuring SSL Host Headers (IIS 6.0)
http://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/596b9108-b1a7-494d-885d-f8941b07554c.mspx

--
Mike
Microsoft MVP - Windows Security


[quoted text, click to view]

DB
11/2/2005 1:02:04 PM
How do I do this?

I have many mail servers that use SSL.

web server names and the SSL names are as follows:--

webmail1.domain.com
webmail2.domain.com
webmail3.domain.com
webmail4.domain.com
webmail5.domain.com

I want users to simply use httpS://webmail.hbk.com which will redirect to
one of these servers (do not worry about how this re-direct works - just
assume it does!)

Problem is that the name they type does not match the SSL on the server so
they get a certificate warning screen.

I could name all servers "webmail.domain.com" so the SSL matches but I do
not want to do this (it breaks another application that requires unique names
and SSLs on each server)

Consultant
11/2/2005 2:08:28 PM
ssl is tied to an ip, not a host header

[quoted text, click to view]

Miha Pihler [MVP]
11/2/2005 10:20:09 PM
Hi,

You can try and obtain wildcard server certificate. In this case certificate
would look like *.domain.com; but not all agencies will want to issue
these...

Obtaining and Installing a Wildcard Server Certificate (IIS 6.0)
http://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/5d0fb4c2-3333-4fec-82fc-6e15d3733937.mspx

--
Mike
Microsoft MVP - Windows Security

[quoted text, click to view]

Consultant
11/3/2005 6:48:10 AM
thank you

[quoted text, click to view]

DB
11/3/2005 9:56:03 AM
Miha Pihler [MVP]
11/3/2005 7:03:11 PM
Yes, you need a wildcard server certificate.

--
Mike
Microsoft MVP - Windows Security

[quoted text, click to view]

AddThis Social Bookmark Button