RE: OpenSSL and IIS4 - problem

[John . Airey]

I would suspect that you are using IE, which is extremely fussy about connecting to IP addresses with SSL. Use the full host name (ie host.domain) to connect. You'll need either an entry in a hosts file, or the host name to exist in your DNS.

 

In the case of the first error, IIS will refuse you access to that directory as you requested a secure channel. It usually says something about requiring a secure connection though.

-
John Airey
Internet Systems Support Officer, ITCSD, Royal National Institute for the Blind,
Bakewell Road, Peterborough PE2 6XU,
Tel.: +44 (0) 1733 375299 Fax: +44 (0) 1733 370848 [EMAIL PROTECTED]

 

 -----Original Message-----
From: David [mailto:[EMAIL PROTECTED]]
Sent: 20 July 2001 01:54
To: [EMAIL PROTECTED]
Subject: OpenSSL and IIS4 - problem

 
Now I am able to install key generated by OpenSSL from IIS key manager
by converting format to IIS format. (Thanks Lisle and John)

Then I did  follow steps.
1. Add my ip(203.1.1.1) and port(443) to keymanager and save changes.
2. Select a virtul directory (download) and update properties with
    Select  'Require Secure Channel'  and 'Do not accept certificates' option
3. Restart IIS.

Then when I try URL:
http://203.76.4.111/download
Error: it tell me not authorized
*why? I did not select require client cert option.

try another
https://203.76.4.111/download
Error: The page cannot be displayed
*why? I already add my ip and port to key manager.

I change option to 'Require Client Certificates' then try URL again,
It still give me same error instead of popup a requre cert window.
If I use this option, do I need to install the same cert into my browser in order to access my secure directory?

What am I doing wrong here?

Thanks.
David