Re: Exchange System Manager Problem - "Folders, SSL Cert"

From: Scott Davis (sdavis_at_esctech.ca)
Date: 08/20/04


Date: Thu, 19 Aug 2004 21:38:50 -0400
To: "Ray Fong [MSFT]" <rayfong@online.microsoft.com>

Ray,

I removed the SSL requirement for the ExAdmin directory. The result is
the same.

That article indicates that the FQDN of the server must be listed on the
SSL cert (assumed for the "Default Web Site") ..

I've used my "WEB" address (wm.MyOrg.Com) instead of my INTERNAL FQDN --
  (server.dom.local).

Any more clues, anyone?

Thanks!

- Scott.

Ray Fong [MSFT] wrote:
> 324345 You receive an SSL Certificate error message when you view public
> http://support.microsoft.com/?id=324345
>
> Ray Fong
> Microsoft SBS Product Support
>
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
>
>
>>Hi, All!
>>
>>Okay, Here's what I've done --
>>
>>Installed my SBS2003, with Exchange.
>>Installed a 3rd party SSL Certificate (freessl.org)
>>
>>When I launch my Exchange System Manager, drill down (Administrative
>>Groups - first administrative group - Folders - Public Folders) ..
>>
>>I get this error message:
>>
>>"The SSL certificate server name is incorrect.
>>ID no: c103b404"
>>
>>In my Event Viewer (System):
>>Source: Schannel, Event ID 36884
>>
>>"The certificate received from the remote server does not contain the
>>expected name. It is therefore not possible to determine whether we are
>>connecting to the correct server. The server name we were expecting is
>><Servername>.<domain>.Local. The SSL connection request has failed.
>>The attached data contains the server cert"
>>
>>Attached Data:
>>
>>-- Looks like raw data from etrust (the FreeSSL cert provider?).
>>
>>
>>============================
>>
>>So, I'm thinking the ESM is looking for the MS-Generated SSL Cert,
>>Specifically, and not finding it (duh - I ripped it out!).
>>
>>Any hints or tips about this would be VM appreciated.
>>
>>Thanks!
>>
>>-- Scott.
>>
>>
>>
>>
>>
>>
>>
>>--
>>====================================================
>>Scott Davis, 45 Dunfield Av, Unit 2117
>>Self-Employed Toronto, ON, Canada, M4S 2H4
>>Tech Consultant (416) 432-4334
>>====================================================
>>
>>
>
>

-- 
====================================================
Scott Davis,		45 Dunfield Av, Unit 2117
Self-Employed		Toronto, ON, Canada, M4S 2H4
Tech Consultant		(416) 432-4334
====================================================


Relevant Pages

  • Most users cant connect to our SSL-- help!
    ... I've included all relevant SSL settings from our ... Subject: Large percentage of customers cannot connect to https: ... server, which then grinds indefinitely. ... "2) Your secure order form is not working. ...
    (comp.security.misc)
  • Most users cant connect to our SSL-- help!
    ... I've included all relevant SSL settings from our ... Subject: Large percentage of customers cannot connect to https: ... server, which then grinds indefinitely. ... "2) Your secure order form is not working. ...
    (comp.security.ssh)
  • Most users cant connect to our SSL-- help!
    ... I've included all relevant SSL settings from our ... Subject: Large percentage of customers cannot connect to https: ... server, which then grinds indefinitely. ... "2) Your secure order form is not working. ...
    (comp.security.unix)
  • Re: Antw: Re: LDAP Authentication Problem
    ... TLSv1 und wird auf einen SSL Client Hello Request mit TLSv1 nicht ... antworten anstatt ein SSLv3 Server Hello. ... the LDAP PAM module and the shadow package. ...
    (de.comp.sys.novell)
  • RE: php4
    ... Mod_php4 only gets loaded if you define SSL. ... Of course I restarted apache after the install... ... # Based upon the NCSA server configuration files originally by Rob McCool. ... Not all browsers support this. ...
    (freebsd-questions)