We are excited to announce that the IIS.NET Forums are moving to the new Microsoft Q&A experience. Learn more >

HTTP SSL service? [Answered]RSS

5 replies

Last post Feb 14, 2008 02:03 PM by mvolo

  • HTTP SSL service?

    Feb 11, 2008 10:20 AM|masso|LINK

     I got SSL-sertificate from my hosting support. 3 files .crt .csr .key

     I tried to install it and now.

     On IIS Default Web Site -> Properties -> Directory Security -> Secure communications -> View Certificate -> Shows certificate fine

    But how do I configure SSL service. It may be installed, but it doens't seem to work at all.

     http://host,com shows pages like before, but when I use https://host,com I just get error.

    Support suggested that I check, if HTTP SSL service is runnig, but I can't even find it. Those tutorials I found doesn't even mentioned HTTP SSL service, so how I enable and use it.

     I followed tutorials, like:
    http://www.petri.co.il/configure_ssl_on_your_website_with_iis.htm

    http://www.windowsecurity.com/articles/Client-Certificate-Authentication-IIS6.html
    http://www.rapidssl.com/ssl-certificate-support/install-ssl-certificate/microsoft_IIS_5.htm
     

  • Re: HTTP SSL service?

    Feb 12, 2008 01:20 PM|mvolo|LINK

    Hi Masso,

    You need to create a binding that uses port 443 on your web site, and assign the SSL certificate there.

    If you have further problems, can you indicate what version of IIS you are running? 

    Thanks,

    Mike Volodarsky

    Program Manager
    IIS Core Server
    Visit mvolo.com for more IIS 7.0 posts, tools, and info

    Mike Volodarsky
    CTO at LeanSentry
    Former IIS/ASP.NET PM

  • Re: HTTP SSL service?

    Feb 12, 2008 03:12 PM|masso|LINK

     IIS version is 6.0, can you tell more about how to make that binding.

    On default web site properties, SSL  port is set to 443.

  • Re: HTTP SSL service?

    Feb 12, 2008 10:32 PM|qbernard|LINK

    Try
    PRB: Error "Page Cannot Be Displayed" When You Connect Through HTTPS
    http://support.microsoft.com/?id=290391

    HOW TO: Determine If SSL Connectivity Is Not Working on the Web Server or on
    an Intermediate Device
    http://support.microsoft.com/?id=290051

    "Cannot find server" or "DNS" Errors When Using SSL (Q & A)
    http://support.microsoft.com/?id=292296

    at command prompt, enter
    "netstat -an", see anything binding on port 443 ?

    anything in event log ?

    Cheers,
    Bernard Cheah
  • Re: HTTP SSL service?

    Feb 13, 2008 07:57 AM|masso|LINK

     Well, now it works partly.

     
    http://domain.com/

    Shows: The page must be viewed over a secure channel

     http://domain.com/login.htm

    Shows: Page normally, while there sould be that secure channel message

     https://domain.com/login.htm

    Shows: Page normally, there is that mini-long on bottom of browser.

     

    So, SSL-works, but while user can access same site without SSL-it doesn't do much security.
     

  • Re: HTTP SSL service?

    Feb 14, 2008 02:03 PM|mvolo|LINK

    You can mark your web site to require SSL (using inetmgr, select site, directory security, edit ..., require SSL checkbox), .  It sounds like you already did that for the root of the site, but you have a different setting for login.htm (and possibly other parts of your site). 

    Check login.htm to make sure it is also set to require SSL.

    You can optionally also remove the port 80 binding from your site, so that it is only available via the SSL binding on port 443. This way your users will just get a "server not found" error when they try to access your site over the non-SSL channel.

    Thanks,

    Mike Volodarsky

    Program Manager
    IIS Core Server
    Visit mvolo.com for more IIS 7.0 posts, tools, and info

     

    Mike Volodarsky
    CTO at LeanSentry
    Former IIS/ASP.NET PM