How do i setup multiple websites using ssl ? -- iis security

Ramon Franzel
11/16/2007 5:43:03 AM

We are running multiple website on iis 6.0.
There are a couple of websites that have to run ssl.
Each website has it's own ip adres and in is registerd in dns according to
this ip.
I tried the following method to achieve this.

example

customer1.domain.com : port 80:62.55.33.11 443:62.55.33.11 require ssl checked
customer2.domain.com : port 80:62.55.33.12 443:62.55.33.12 require ssl checked

strange things happen when i try to do this :

http://customer2.domain.com it redirects to the website from customer1 with
the following url : https://customer1.domain.com

I checked the metabase explorer for the "securebindings" option and also
tried to put in the hostheader there.
I also enabled the "enable metabase editing while iis is running" option.

My question : How do i configure iis to get several websites running on ssl.
By using the "require ssl" because i wan't them to redirect to https.

Ken Schaefer
11/18/2007 12:36:05 AM

If you select the "require HTTPS" setting, IIS does not redirect anyone by
default (instead they get a 401 - Forbidden: SSL Required error message)

So, if the user is being redirected when attempting HTTP access, then
something you are doing is causing that redirect. You need to look into
that.

Cheers
Ken

--
My IIS Blog: www.adOpenStatic.com/cs/blogs/ken

[quoted text, click to view]

THKS
12/17/2007 9:08:06 PM

Follow these steps and see.

assign certificates to each site through IIS.(you should be having 2
different certificates)
assign port 443 to the respective IP's through IIS (host headers won't help
because SSL does not support host headers)
make a virtual folder under each site pointing to the web content and keep
require ssl checked only to that virtual folder.
in the root of the each site, place a redirect page which can redirect http
to https: with the complete URL pointing to http:\\site\virtualfolder. make
this redirect pages as default on each site.

[quoted text, click to view]

Got something to say? Click here to post a reply to this thread.

Don't see what you're looking for? Try a search.

View other messages about iis security

iis security : How do i setup multiple websites using ssl ?