Jump to content
EduGeek EdSec 2026 is Go! 27th Oct in Derby! Join us for a day of EdTech security focused talks, networking, and an evening social ×

Recommended Posts

Posted

It was working yesterday - before I did any Windows updates and was using IE6 to test (say's alot really).

 

We are in the midst of changing ISP. Our old ISP had our server hidden behind a reverse proxy. Our new ISP has given us a number of real live Internet address to play with!

 

So being live on the Internet, I think it's time I looked properly at Windows Firewall and Windows Updates (how lax was our network security).

 

IIS is set to require an HTTPS connection. This has been working fine through our old reverse proxy connection and worked yesterday. The SSL certificate was self signed and waaay out of date.

 

I'm in the process of getting a proper SSL certificate. I've just completed Windows Updates (Server 2008R2 SP1). Firewall is now on and only accepting HTTP and HTTPS connections from the external interface.

 

The site no longer loads on a test pc. SSL error according to Chrome. Communication error according to IE10.

 

Doesn't matter if the firewall is on or off, I get the same - no page.

 

Turn SSL off (with the firewall on) and everying works as expected.

 

So, something had broken in my IIS SSL setup. Has either the Windows Updates and/or using a more modern web browser than IE6 made SSL certification stricter? Is it because I have a self certified certificate at the moment, or is something else stopping SSL from working?

 

Thanks

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now



×
×
  • Create New...