RE: OWA SSL problem

[Brent Hudson]

Title: OWA SSL problem

Guys please keep the outcome of this on list.. Its something that I'm having problems with too..

 

B

-----Original Message-----
From: John Weber [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, June 26, 2002 1:03 AM
To: MS-Exchange Admin Issues
Subject: RE: OWA SSL problem

outbound

-----Original Message-----
From: Steve Hart [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, June 25, 2002 15:43
To: MS-Exchange Admin Issues
Subject: RE: OWA SSL problem

Sure. But send it straight to me at [EMAIL PROTECTED]    I don't suppose we need to bury the list with it.

 

Steve

-----Original Message-----
From: John Weber [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, June 25, 2002 3:34 PM
To: MS-Exchange Admin Issues
Subject: RE: OWA SSL problem

you wanna accept a mondo wordpad of screen shots?

-----Original Message-----
From: Steve Hart [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, June 25, 2002 14:45
To: MS-Exchange Admin Issues
Subject: RE: OWA SSL problem

 From John:  (By the way thanks in advance)

 Is the OWA the only thing running on the IIS?  Usually, default IIS install will have a "default website" with Exchange being a virtual under that.  You can have the virtual on ssl OR/AND http, and the parent being one or both or either. They are not linked.  

 

> We have a web site running as the default web site. It is set up using anonymous access and no encryption. Exchange is a virtual folder under it, using Basic Authentication. I've been testing some of the time with SSL required and sometimes not. It will be running on SSL before I announce OWA to the world.

 

 

 

 Server listening on 443 does not necessarily mean that the IIS is doing it. 

 

> OK

 

 

 In the IIS on the OWA server, is the virtual for exchange pointing into the proper exchsrvr dir on the 55sp4 box?  Does it have rights into that dir?  The OWA webaccess dir is/should be:  c:\exchsrvr\webdata (ymmv).  If local, then no share needed on the Ex box.  If using a separate IIS server, then you'll have to have the dir shared .

 

> I'm pretty sure this is set up correct. The web access directory is right and I am able to access my mailbox using http. It seems everything from the OWA server to the Exchange server is OK.

 

 

If you want the ssl, then the owa server MUST be addresses with https.  If the "cannot find server" comes up on https but not http, then I would start looking at whether or not the IIS is ssl enabled for the Exchange virtual site .

 

> I've checked "Require secure channel (SSL)" in the Secure Communications dialog box of the Exchange virtual directory. Is there anything else I'm missing to enable SSL?

 

 

 http://10.x.x.x gets you IIS default site or OWA? 

 

> Sorry, I was pretty unclear.

http://10.x.x.x gets me to the default website.

http://10.x.x.x/exchange tells me I must use a secure connection.

If I uncheck the "Require secure channel" box, http://10.x.x.x/exchange gets me OWA, and after logging in, I get to the Exchange server.

 

https://10.x.x.x/exchange brings up a dialog box noting an untrusted certificate. This is expected and normal as the certificate is coming from my own Certificate Server (actually, the same OWA box). After I accept the certificate, the next screen is the "Cannot find server or DNS error". If I try a refresh, IE just spins forever. A new browser window will repeat the process.

 

 

I've tried a full reinstall of IIS, OWA and Cert Server, but I've got the same problem, so it must be a configuration issue.

 

Steve

 

 

 

 

-----Original Message-----
From: Steve Hart [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, June 25, 2002 09:38
To: MS-Exchange Admin Issues
Subject: RE: OWA SSL problem

I'm not even getting that far. https://10.x.x.x/exchange results in a "cannot find server" message

 

http://10.x.x.x works fine.

 

SH

 

 

-----Original Message-----
From: John Weber [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, June 25, 2002 8:50 AM
To: MS-Exchange Admin Issues
Subject: RE: OWA SSL problem

Try inside the domain first.  And start with straight IP.  https://xxx.xxx.xxx.xxx/exchange

You SHOULD get a message regarding the validity of your cert, depending on how it got setup.

If this works, you at least know it is working internally to the collision domain.

Past that, by chance are you setup right on the router/firewall level?

-----Original Message-----
From: Steve Hart [mailto:[EMAIL PROTECTED]]
Sent: Monday, June 24, 2002 15:08
To: MS-Exchange Admin Issues
Subject: OWA SSL problem

I brought this one up last week and although I've researched and followed the advice I received, I'm still stuck.

I've got OWA up and running fine on straight http, but I can't connect using https. The browser returns the message "Can't find server or DNS error". DNS is OK so it seems that either the server isn't listening on 443, or the server is ignoring my workstation due to some certificate problem.

I've tried everything I can find including Q228821, Q234022, Q265847, Q290391, Q292296 and Q301428.

Netstat -an shows the server listening on Port 443. I've deleted all certificates on the browsing computer, but it doesn't seem to be getting new ones.

Environment:
Exchange Server   NT 4.0 SP6a      Exchange 5.5 SP4       Member Server
OWA Server        2000 Server SP2  OWA 5.5 SP4            Member Server
Workstation       2000 Pro SP2     IE 6 w/ Latest Patches
2000 AD Domain

I'm usually pretty good at resolving this kind of stuff with the help of books and MS, but this one is frustrating me.

Any ideas?

Steve

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm