+ Post New Thread
Results 1 to 4 of 4
Windows Thread, Exchange 2007 SSL - internal problem in Technical; THINK I NEED AN EXCHANGE EXPERT ON THIS ONE !!! Hi, We have recently been trying to get "Outlook anywhere" ...
  1. #1

    Join Date
    Aug 2007
    Posts
    811
    Thank Post
    98
    Thanked 64 Times in 46 Posts
    Rep Power
    25

    Exchange 2007 SSL - internal problem

    THINK I NEED AN EXCHANGE EXPERT ON THIS ONE !!!

    Hi,
    We have recently been trying to get "Outlook anywhere" working, previously Exchange 2007 internally and webmail from home has been working perfectly...

    But today after changing the "autodiscover" ip address in DNS, autodiscover seemed to start working..... BUT

    Now internally when anyone opens outlook they get the SSL certificate error:



    "The name of the security certificate is invalid or does not match the name of the site"

    We changed back what we had done and autodiscover still seems to work, but the SSL error hasnt gone away and wont !!!!

    In our certificate you can see we have:
    webmail.domain.sch.uk and autodiscover.domain.sch.uk....

    Our mail server is called MAIL and the internalurl points to:



    Should we also have "mail.domain.sch.uk" in our SSL certificate?
    its too late now and would cost another 700quid !

    But i cant work out why it was working fine before and now the error pops up?

    Can an exchange expert please help or suggest something?

    Weve tried reading through
    http://support.microsoft.com/kb/940726
    but this looks too me like it is aimed at people who have their new SSL certificate and need to change the location of there URL`s to match the SSL instead of the exchange default, which is the FQDN.....

    Could it be as simple as us changing our internalurl to webmail.domain.sch.uk?

    Cheers in advance
    Attached Images Attached Images
    Last edited by burgemaster; 7th May 2008 at 09:14 PM.

  2. #2

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    11,039
    Thank Post
    852
    Thanked 2,666 Times in 2,263 Posts
    Blog Entries
    9
    Rep Power
    767
    Could it be that the server still has a DNS entry cached for that name that does not match up to your new ip address. Have you tried creating a new certificate for it if its an internal cert server?

  3. #3

    Join Date
    Aug 2007
    Posts
    811
    Thank Post
    98
    Thanked 64 Times in 46 Posts
    Rep Power
    25
    Hi there,
    Its a purchased certificate that cant be changed..
    DNS has the correct ip in the entry...

    It lookslike M$ in that link are having:

    The Service Connection Point object for the Autodiscover service
    The InternalUrl attribute of Exchange 2007 Web Service (EWS)
    The InternalUrl attribute of the Offline Address Book Web service
    The InternalUrl attribute of the Exchange unified messaging (UM) Web service

    All point to the same location? in there case: mail.contoso.com
    we have webmail.domain.com on our cert so i might try and change them all to the same... currently some are mail.xxxxx some are webmail.xxxx


  4. #4

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    11,039
    Thank Post
    852
    Thanked 2,666 Times in 2,263 Posts
    Blog Entries
    9
    Rep Power
    767
    Sounds like a good plan, if it is switching between the roles during logon or something that could cause those kinds of errors.

SHARE:
+ Post New Thread

Similar Threads

  1. Replies: 4
    Last Post: 21st February 2008, 03:09 PM
  2. Exchange 2003 or 2007 for internal email only.
    By tosca925 in forum Windows
    Replies: 4
    Last Post: 8th October 2007, 12:59 PM
  3. Internal Mail on Exchange Server
    By johnkay21 in forum Windows
    Replies: 6
    Last Post: 15th May 2007, 07:20 PM
  4. Replies: 6
    Last Post: 3rd May 2007, 02:29 PM
  5. internal spamming of exchange
    By goodhead in forum Windows
    Replies: 20
    Last Post: 22nd February 2007, 08:46 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •