Home | Site Map | Cisco How ToNet How To | Wireless |Search | Forums | Services | Donations | Careers | About Us | Contact Us|

SSL port grayed out in XP

Network Sharing , TCP/IP, Internet, Wireless, Exchange, IIS, ISA and Print

SSL port grayed out in XP

Postby chicagotech » Sat Oct 25, 2008 3:24 pm

Q: I am trying to setup SSL on my XP pro with SP3. The SSl port on the properties of default web site is grayed out (see this link: http://chicagotech.net/images/ssl1.gif. If I click on Advanced, I can see the port 443 but can't change it (link: http://chicagotech.net/images/ssl2.gif).

A: Please open the site's property. In Directory Security tab, have you
installed a Server Certificate for this web site?

If you want to issue a SSL certificate with your own CA server and install
it onto the web site. Please refer to the following article for detailed
steps:

How To: Set Up SSL on a Web Server
http://msdn.microsoft.com/en-us/library/aa302411.aspx
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
chicagotech
Site Admin
 
Posts: 7066
Joined: Mon Nov 27, 2006 1:24 pm
Location: Chicago USA

Postby chicagotech » Sat Oct 25, 2008 3:24 pm

I did try to install a Server Certificate on this XP. But I can't run
http//localhost/certsrv. this is the error message. How to fix this error?
The page cannot be found
The page you are looking for might have been removed, had its name
changed, or is temporarily unavailable.
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
chicagotech
Site Admin
 
Posts: 7066
Joined: Mon Nov 27, 2006 1:24 pm
Location: Chicago USA

Postby chicagotech » Sat Oct 25, 2008 3:25 pm

You cannot install Certificate Service on an XP machine which means Windows
XP cannot be built as a CA server. Do you have any Windows 2003 or 2000
boxes? If so, you can install Certificate Services on that system from
Add/Remove Windows Components(please ensure IIS is installed first). Then
you can use the certsrv site on it to issue certificates.
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
chicagotech
Site Admin
 
Posts: 7066
Joined: Mon Nov 27, 2006 1:24 pm
Location: Chicago USA

Postby chicagotech » Sat Oct 25, 2008 3:27 pm

Host header doesn't work with SSL because the whole https
response(including host header info) is encrypted. The common way to set up
multiple SSL sites with 443 port on a server is using different IP address.

Another solution is using the same wildcard certificates(e.g: common name
is *.mydomain.com ) on different SSL sites. Then host header will work.
Please take a look at below article:

Configuring SSL Host Headers (IIS 6.0)
http://www.microsoft.com/technet/prodte ... rary/IIS/8
d9f2a8f-cd23-448c-b2c7-f4e87b9e2d2c.mspx?mfr=true
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
chicagotech
Site Admin
 
Posts: 7066
Joined: Mon Nov 27, 2006 1:24 pm
Location: Chicago USA


Return to Networking

Your Ad Here

Who is online

Users browsing this forum: No registered users and 5 guests