Search results matching tag 'ssl Server Certificate'

Failed to install Verisign SSL digital certificate on IIS 5.0. Please help!!

stamtarm — Mon, 05 Jan 2009 04:15:03 GMT

I have tried several times, revoke and replace certificate, and asked Verisign for help too. But at the end it still failed.

Error message are shown as below:

- When installing the certificate:

"Failed to install certificate, keyset does not exists"

- When trying to export the private key using MMC function, the option for "Export private key" is disabled and it says "Notes: The associated private key cannot be found. Only the certificate can be exported."

I have changed the permission of the administrator and system account to Full Control for the following folders and files already:

Folders

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys

C:\Documents and Settings\Administrator\Application Data\Microsoft\Crypto\RSA

All files inside the following folder

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys

Please kindly assist!! Thank you very much!!

sta

403.7 64 on IIS 6 on both XP 64 and server 2003 R2 64

Carrots — Mon, 03 Nov 2008 15:01:01 GMT

In the IIS logs, our client has found a bunch of 403.7 64 's being logged. Most of them are to /VirtualDirectoryName, for example:

2008-10-30 06:41:00 W3SVC3 xxx.xxx.xxx.xxx GET /VirtualDirectoryName - 443 - xxx.xxx.xxx.xxx Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+.NET+CLR+2.0.50727;+.NET+CLR+1.1.4322;+.NET+CLR+3.0.04506
.30;+.NET+CLR+3.0.04506.648;+.NET+CLR+3.5.21022) 403 7 64

These happen quite often, sometimes 4 or so requests in a row.
Directory browsing is disabled on the sites, and the default page is set to default.htm which exists, so theoretically, there should be no requests for the path.
I have enabled schannel logging, but couldnt find one matching the timestamp in IIS. For example, in IIS we have one for 2008-10-30 11:49:50, and in event viewer we have one for 11:49:52 and one for 11:49:45. I also couldnt find a patter that makes it look like the one is trailing the other by a couple of seconds.

All the IIS requests are on port 443, none are on 80.

Schannel logs information events, but no warnings.
The client confirmed that the system logs and IIS logs were from the same server.

They run Windows 2003 x64 R2 on a NLB cluster. The machines in the testing environment is a single machine only.
I am able to intermittently reproduce it on my own environment (XP 64). One out of 20 times doing the exact same actions will give me the error in the logs. The error does not affect the user at all.

Testers currently test on Windows XP 32, with IE6, IE7 and Firefox, using software certs, or in some cases USB tokens. I replicated using a software cert.

Now this does not sound like something I should be spending my time on, but the client is being audited, and this has been raised as a concern by the auditing company.

Securing sites - classic asp - .Net 1.1, .Net 2.0, and .Net 3+

mybestguess — Mon, 13 Oct 2008 18:54:58 GMT

It as been the recent task of our team to come up with both short and long term solutions to the concern of SSL security on our sites.

The first solution off the top of the head is to do 1 of the following 2. Either take the pain and time consuming option of coding each individual website to rediret to https to use ssl. The second approach would be to have IIS force a redirect to the https and www paths.

The catch is what would be the best approach. I am thinking of a quick and easy temporary solution first. Then a long term solution. But the long term solution has a catch. In the next few months (early - Mid 2009) we are moving to Server 2008 with IIS7 and that may negate the changes necessary in IIS6.

Any and all suggestions are appreciated on this matter. If you have any suggestions regarding the best way to add SSL to existing sites please let me know. I would like to try and avoid a manual reprogramming of that many websites. Thank you

MBG

Import ssl certificate on iis 7

saquib189 — Sat, 14 Jun 2008 16:44:32 GMT

Hi, I got the 14 days trial certificate from Verisign for testing my site. www.saquibs.com and i have windows vista workstation but i don't know how to install the ssl certificate and also get the Intermediate CA cerificate code which i save on .cer file . so please help me how can i enable ssl on my remote site. thank you