SSL Confusion!

[mitchell1981]

Hi All,

 

I'm quite new to IIS and Exchange and I've been trying to enable FBA mode for Web Outlook.

 

This requires SSL to be enabled. I've created a self signed certificate using selfssl.exe and installed it on the Exchange server. SSL is set to use port 443, and TCP is set to use Port 8383.

 

Accessing the server using: http://servername:8383/ works just fine.

 

If I use https://servername:443 or just https://servername I first get a certificate error, which is to be expected as the certificate is untrusted. I'm happy with that, however, I then get a page that says:

 

Under Construction: There is no default page

 

I'm probably doing something stupid, but I would have assumed that the server would point to the same pages regardless of whether I use SSL or not. Anyone got any ideas? As I've said, I'm not very experiences with IIS or SSL.

 

Thanks.

[plock]

You then need to go from the server to the exchange site.

 

Try using: https://servername/exchange. Or whatever you called your 'Outlook Web Access' site in IIS.

 

Hope that helps!

[ZeroHour]

Take a look at:

http://www.isaserver.org/tutorials/2004owafba.html

They also have a guide I used for commercially purchased certificates. Remember there are a few rules before using SSL and mobile devices (eg activsync mobile and oma ssl)

[snrweb]

you need the /exchange on the end of your link mate.

 

https://servername/exchange

 

As its just the default web site on the main URL (/servername) you would expect that to appear.

 

If that URL is too much for your users (like it is for mine!) replace the default.htm with a page that just forwards to the exchange page after a few secs.

 

 

FBA mode rocks!

[mitchell1981]

Thanks for the replies. I'll try them out and see how they go. I'll let you know how I get on!

[Jobos]

Is there a way to stop the certificate error without buying a certificate from a third party?

[Geoff]

No, that's a feature.

[Jobos]

So what’s the going rate for a simple certificate to allow OWA to work without panicking the staff?

[Geoff]

$20/year from GoDaddy.

 

But there's plenty of other places to choose from. Google for 'SSL Certificate'

[mitchell1981]

Thanks for the GoDaddy link. That's very cheap and might actually get one of those. Especially now that IE7 makes the error look even more frightening!

 

Just one more question. I've got the FBA mode working perfectly now. But users can still get into their mail using either:

 

"https://servername/exchange" (correct)

 

or

 

"http://servername:8383/exchange/" (don't want this to work)

 

Is there an easy way to stop it working when a user doesn't use the secure address?

 

Thanks.

[plexer]

Why not use selfssl from the IIS6 resource kit?

 

Ben