Groups | Blog | Home
all groups > iis security > december 2007 >

iis security : Stuck with SSL error


Tiago Halm
12/8/2007 5:54:20 PM
What kind of certificate did you create? Must be Server Authentication type.
Open up the certificate from the store (via MMC). Do you have the private
key? Does the Pool account have access to the certificate private key?

Anyway, try to avoid having the DC as the IIS box (create a member), unless
there is no other box.

Tiago Halm

[quoted text, click to view]

Rik
12/8/2007 6:38:39 PM
Setup
w2k3 server as a DC
Certificate services (run my own CA, stand alone)
Configured IIS to use secure channel (port 443) and certificates
During installation no errors, I am able to obtain a certificate from the
server, but I am unable to connect to the website "webpage not available"
Checked everything (including firewall settings) but I am stuck.
Running IIS diagtool I see 3 errors
#WARNING: AcquireCredentialsHandle failed with error -2146893043(0x8009030d)
#WARNING:AccessSSL = True (resource inaccessible due to SSL does not work on
this website)
#WARNING:AccessSSLRequireCert = True (resource inaccessible due to SSL does
not work on this website)
My own CA is listed in "trusted root certificates Authorities" the
certificate is listed in "personal"

What is wrong?
With kind regards
Rik


Rik
12/8/2007 7:36:10 PM

"Tiago Halm" <thalm@nospam.hotmail.com> schreef in bericht
news:%23K1JHJcOIHA.3516@TK2MSFTNGP02.phx.gbl...
[quoted text, click to view]

The certificate is intended for the following purposes
Certificate is "All issuance policies" and "All application policies"
However from the advanced view "server authentication is selected"

[quoted text, click to view]
I do have a private key
Does the Pool account have access to the certificate private key?

pool account ?? Sorry does not ring a bell !!





[quoted text, click to view]

I thought so,....unfortunately there is no other box..

Rik

[quoted text, click to view]

Tiago Halm
12/8/2007 8:20:50 PM
Pool account as in the user configured in the IIS 6 AppPool associated with
the WebSite (and VDirs under it) where the certificate is set. Anyway, I've
just googled a bit and this may not be an issue.

See this google snapshot:
http://64.233.183.104/search?q=cache:6Ek37ZSxTUgJ:www.webservertalk.com/message898866.html+%22resource+inaccessible+due+to+SSL+does+not+work+on+this+website%22&hl=en&ct=clnk&cd=1&gl=uk

Tiago Halm


[quoted text, click to view]

THKS
12/17/2007 11:42:00 AM
two things you need to check. One is whther your certificate used on the
server is associated with the private key. Second is whether your have
correctly configure the site to use the SSL. IIS SSL configuration requires a
dedicated IP and does not work with host headers.

[quoted text, click to view]
AddThis Social Bookmark Button