Re: HTTPS setup

2001-01-11 Thread David Cummins

Thanks for the quick replies from Bob and yourself... even if I didn't get back
to it until now because of my mail backlog... ;)

We do have other sites on the same IP, but none of them use SSL. That shouldn't
matter, should it? The default site if you go in by IP is a different site, but
that's only for port 80, so I guess its irrelevant.

David Cummins

Sean Daniels wrote:
 
  The key's all set up properly, but it just finds nothing if you
  browse to it...
  we've set the SSL port to be 443 in IIS, so it should know it
  exists. We've also
  set the IP and headers with that port.
 
  We're definitely using the URL the key was registered for.
 
  Any ideas?
 
 You aren't sharing the IP address amongst sites are you? SSL doesn't support
 host headers, so each site needs it's own IP address.

~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists



RE: HTTPS setup

2001-01-11 Thread Sean Daniels

 We do have other sites on the same IP, but none of them use SSL.
 That shouldn't
 matter, should it? The default site if you go in by IP is a
 different site, but
 that's only for port 80, so I guess its irrelevant.

Is it possible for you to try making the SSL site the one with no host
header requirement? If so, I would be interested to know if that solved it.

I think that when you make the request https://www.whatever.com to your
site, since the host header gets ignored for https, your server looks for
the file on the default site.

Follow? I'm kind of speculating here I guess...

- Sean
~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists



RE: HTTPS setup

2001-01-11 Thread Zachary Bedell

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

  We do have other sites on the same IP, but none of them use SSL.
  That shouldn't
  matter, should it? The default site if you go in by IP is a
  different site, but
  that's only for port 80, so I guess its irrelevant.
 
 Is it possible for you to try making the SSL site the one with no
 host header requirement? If so, I would be interested to know if 
 that solved it.
 
 I think that when you make the request 
 https://www.whatever.com to your
 site, since the host header gets ignored for https, your 
 server looks for
 the file on the default site.
 
 Follow? I'm kind of speculating here I guess...


That's exactly the answer.  SSL and host headers don't mix, period...

If you have an SSL site, it needs its own IP address.

Best regards,
Zac Bedell

-BEGIN PGP SIGNATURE-
Version: PGPfreeware 6.5.8 for non-commercial use http://www.pgp.com
Comment: Please use PGP!

iQA/AwUBOl4zfqvhLS1aWPxeEQLZfACgolQEzOghulAn/4Gk3n7g8Ta0UA0AoPGX
Rm3JErjwde+ySwpazu8gaLdx
=lx1Z
-END PGP SIGNATURE-

~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists



RE: HTTPS setup

2001-01-11 Thread Bob Silverberg

Or its own port.

-Original Message-
From: Zachary Bedell [mailto:[EMAIL PROTECTED]]
Sent: January 11, 2001 5:28 PM
To: CF-Talk
Subject: RE: HTTPS setup


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

  We do have other sites on the same IP, but none of them use SSL.
  That shouldn't
  matter, should it? The default site if you go in by IP is a
  different site, but
  that's only for port 80, so I guess its irrelevant.

 Is it possible for you to try making the SSL site the one with no
 host header requirement? If so, I would be interested to know if
 that solved it.

 I think that when you make the request
 https://www.whatever.com to your
 site, since the host header gets ignored for https, your
 server looks for
 the file on the default site.

 Follow? I'm kind of speculating here I guess...


That's exactly the answer.  SSL and host headers don't mix, period...

If you have an SSL site, it needs its own IP address.

Best regards,
Zac Bedell

-BEGIN PGP SIGNATURE-
Version: PGPfreeware 6.5.8 for non-commercial use http://www.pgp.com
Comment: Please use PGP!

iQA/AwUBOl4zfqvhLS1aWPxeEQLZfACgolQEzOghulAn/4Gk3n7g8Ta0UA0AoPGX
Rm3JErjwde+ySwpazu8gaLdx
=lx1Z
-END PGP SIGNATURE-
~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists



RE: HTTPS setup

2001-01-08 Thread Bob Silverberg

I encountered a problem setting up multiple secure sites on the same server
using host headers.  If your sites currently all share the same IP address,
you can't set them all up on port 443.  The two solutions that I found were:
1. Set up each site on a separate port.
2. Give each site it's own IP address.

I'm not sure if that addresses your problem, but it's something I
encountered so I thought it would be worth sharing.

Bob


-Original Message-
From: David Cummins [mailto:[EMAIL PROTECTED]]
Sent: January 8, 2001 3:06 PM
To: CF-Talk
Subject: OT: HTTPS setup


Has anyone set up up HTTPS on an IIS server with multiple sites on it?

The key's all set up properly, but it just finds nothing if you browse to
it...
we've set the SSL port to be 443 in IIS, so it should know it exists. We've
also
set the IP and headers with that port.

We're definitely using the URL the key was registered for.

Any ideas?

David Cummins
~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists



RE: HTTPS setup

2001-01-08 Thread Sean Daniels

 The key's all set up properly, but it just finds nothing if you
 browse to it...
 we've set the SSL port to be 443 in IIS, so it should know it
 exists. We've also
 set the IP and headers with that port.

 We're definitely using the URL the key was registered for.

 Any ideas?

You aren't sharing the IP address amongst sites are you? SSL doesn't support
host headers, so each site needs it's own IP address.

- Sean
~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists