Re: Multiple Secure Sites

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: abing (anonymous_at_discussions.microsoft.com)
Date: 03/09/04


Date: Tue, 9 Mar 2004 14:25:05 -0800

I actually have both for all three websites because, I
intially tried this using host headers but then learned
that they would not work with SSL, then I tried entering
different SSL port numbers for all 3 sites. The port
numbers work fine for users within the firewall but
outside of the firewall, I keep getting the error message
that the server can not be found and I have alot of users
within the company that are outside of the firewall at
this location. The firewall is handled by another group
entirely and I have been trying to avoid getting more ip
addresses because of the red tape. Is there any other
route I could go?

>-----Original Message-----
>
>"abing" <anonymous@discussions.microsoft.com> wrote in
message
>news:91e601c40564$9a6ed600$a001280a@phx.gbl...
>> I have a Win2k Advanced member server on a company
>> intranet. I am administering 3 websites on the server
>> with 1 ip address and I have users inside and outside
of a
>> firewall on the domain I am on. I have the sites
>> seperated using host header names. However so users
>> outside of the firewall could gain access to the sites I
>> got SSL Certificates for all three sites issued from a
>> group within the company I work for. It is my
>> understanding that for SSL I could use port numbers to
>> direct users to a specific site. For example :
>> https://myfirstwebsite.com:2443
>> However this does not work for users outside of the
>> firewall. Inside of the firewall it works
perfectly.Only
>> the default website (it is the first one I got a SSL
>> certificate for) can be seen by users outside of the
>> firewall by typing https://myfirstwebsite.com. The
>> firewall people tell me that using the port numbers
should
>> work. Is there something I am missing or not setting up
>> properly. Any suggestions would be greatly appreciated.
>>
>> Adrienne
>
>Adrienne,
>
>I'm a bit confused by your post. In the first part, you
indicate you use
>host headers for the website, but in the latter part, you
indicate that you
>are using port numbers.
>
>Are you using both host headers and port numbers for the
different sites?
>
>If so, host headers don't work with SSL websites on IIS:
>
>http://support.microsoft.com/default.aspx?
scid=http://support.microsoft.com:80/support/kb/articles/Q1
87/5/04.ASP&NoWebContent=1
>
>BTW, if that is the case that you are using both host
headers and port
>number for each website, then I think that port numbers
alone should be
>enough (i.e., so you wouldn't need the host headers).
You could set up each
>website with different port numbers.
>
>
>.
>



Relevant Pages

  • Re: SSL and single IP access
    ... You might could implement this by using alternative ports for the secured site, but then you would have to resolve the firewall issues. ... | SSL certificates will not work with host headers, ...
    (microsoft.public.inetserver.iis.security)
  • Re: IIS 6 and SSL
    ... SSL cert binding is specific to a IP:Port and does not support host headers. ... If it is internal and you control all clients accessing the website, ...
    (microsoft.public.inetserver.iis)
  • Re: Running 2 SSL Certificates on SBS03 default website
    ... Host headers don't really work with SSL, hence you can't have 2 certifcates ... > on our default website, I was thinking of having a subdomain and getting a ...
    (microsoft.public.windows.server.sbs)
  • Re: Outlook WebAccess (Exchange 2003) with SSL on IIS 6 (Windows 2003)
    ... If you are unable to browse any page in the website using https, then SSL ... need to get rid of it, since SSL and host headers will not work together. ... Microsoft Developer Support ...
    (microsoft.public.inetserver.iis.security)
  • Re: Multiple Secure Sites
    ... > firewall on the domain I am on. ... > the default website (it is the first one I got a SSL ... > firewall people tell me that using the port numbers should ... Are you using both host headers and port numbers for the different sites? ...
    (microsoft.public.inetserver.iis)