IIS 5 & IIS 6
HTTP SSL service?
Last post Feb 14, 2008 02:03 PM by mvolo
Feb 11, 2008 10:20 AM|masso|LINK
I got SSL-sertificate from my hosting support. 3 files .crt .csr .key
I tried to install it and now.
On IIS Default Web Site -> Properties -> Directory Security -> Secure communications -> View Certificate -> Shows certificate fine
But how do I configure SSL service. It may be installed, but it doens't seem to work at all.
http://host,com shows pages like before, but when I use https://host,com I just get error.
Support suggested that I check, if HTTP SSL service is runnig, but I can't even find it. Those tutorials I found doesn't even mentioned HTTP SSL service, so how I enable and use it.
I followed tutorials, like:
Feb 12, 2008 01:20 PM|mvolo|LINK
You need to create a binding that uses port 443 on your web site, and assign the SSL certificate there.
If you have further problems, can you indicate what version of IIS you are running?
IIS Core Server
Visit mvolo.com for more IIS 7.0 posts, tools, and info
Feb 12, 2008 03:12 PM|masso|LINK
IIS version is 6.0, can you tell more about how to make that binding.
On default web site properties, SSL port is set to 443.
Feb 12, 2008 10:32 PM|qbernard|LINK
PRB: Error "Page Cannot Be Displayed" When You Connect Through HTTPS
HOW TO: Determine If SSL Connectivity Is Not Working on the Web Server or on
an Intermediate Device
"Cannot find server" or "DNS" Errors When Using SSL (Q & A)
at command prompt, enter
"netstat -an", see anything binding on port 443 ?
anything in event log ?
Feb 13, 2008 07:57 AM|masso|LINK
Well, now it works partly.
Shows: The page must be viewed over a secure channel
Shows: Page normally, while there sould be that secure channel message
Shows: Page normally, there is that mini-long on bottom of browser.
So, SSL-works, but while user can access same site without SSL-it doesn't do much security.
Feb 14, 2008 02:03 PM|mvolo|LINK
You can mark your web site to require SSL (using inetmgr, select site, directory security, edit ..., require SSL checkbox), . It sounds like you already did that for the root of the site, but you have a different setting for login.htm (and possibly other
parts of your site).
Check login.htm to make sure it is also set to require SSL.
You can optionally also remove the port 80 binding from your site, so that it is only available via the SSL binding on port 443. This way your users will just get a "server not found" error when they try to access your site over the non-SSL channel.