Accessing a Virtual Directory over https only
am 30.10.2007 06:22:04 von Brendan Grant
I have created a virtual directory in IIS6 on a 2k3 R2 SP2 server that
serves files fine when viewed over http, however I want to control access
and do so securely to this dir so I first disable anon access and require
basic authentication which works great for denying anon access and requiring
a valid login.
Given that basic transmits its passwords in the clear I also check the
Require secure channel (SSL) option in Web Dir -> Properties -> Virtual
Directory -> Secure communications -> Edit... doing so denies access via
http however when I change the URL to begin with https, IE returns a generic
'Internet Explorer cannot display this webpage.'
The web site I'm doing this in is configured with the standard SSL port of
443.
For a sanity check I tried the above one more time on another 2k3 R2 SP2 box
which already has a web app that works great over https (through
redirection) to an identical result.
I suspect (but a dev and not an admin) this is certificate related... which
puzzles me even more because I've created and installed my own self signed
cert as well as used the one that already exists on the second working
box... only my dir still doesn't work.
Aside from suggesting that a dev not be touching a server (which I'd agree
with :) )... any thoughts?
Brendan
Re: Accessing a Virtual Directory over https only
am 30.10.2007 10:39:58 von Ken Schaefer
What you have done should work just fine.
In Internet Explorer goto Tools -> Options -> Advanced and uncheck "Show
Friendly HTTP errors". Then reload the page.
If you get "Can not find server or DNS error" down the bottom of the page,
then IIS isn't responding at all. Check httperr.log file on the server.
If you get some kind of HTTP status code, then post that so we can analyze
further what's going on.
Cheers
Ken
"Brendan Grant" wrote in message
news:A7B0A1A9-18B8-49B5-8DC2-1F6C847520FB@microsoft.com...
>I have created a virtual directory in IIS6 on a 2k3 R2 SP2 server that
>serves files fine when viewed over http, however I want to control access
>and do so securely to this dir so I first disable anon access and require
>basic authentication which works great for denying anon access and
>requiring a valid login.
>
> Given that basic transmits its passwords in the clear I also check the
> Require secure channel (SSL) option in Web Dir -> Properties -> Virtual
> Directory -> Secure communications -> Edit... doing so denies access via
> http however when I change the URL to begin with https, IE returns a
> generic 'Internet Explorer cannot display this webpage.'
>
> The web site I'm doing this in is configured with the standard SSL port of
> 443.
>
> For a sanity check I tried the above one more time on another 2k3 R2 SP2
> box which already has a web app that works great over https (through
> redirection) to an identical result.
>
> I suspect (but a dev and not an admin) this is certificate related...
> which puzzles me even more because I've created and installed my own self
> signed cert as well as used the one that already exists on the second
> working box... only my dir still doesn't work.
>
> Aside from suggesting that a dev not be touching a server (which I'd agree
> with :) )... any thoughts?
>
> Brendan
Re: Accessing a Virtual Directory over https only
am 02.11.2007 02:42:02 von Brendan Grant
Thanks for your input Ken, as it turns out though... I'm just an idiot.
Most of my problems had to do with a separate application that would
automatically disable the web server in a less than visible way... no matter
how they do it, I'd always expected my changed to only be useful after that
app re-enables the web server... and much of my testing was being done
before that enablement.
Problem solved.
Brendan
"Ken Schaefer" wrote in message
news:%23AZUvjtGIHA.4880@TK2MSFTNGP03.phx.gbl...
> What you have done should work just fine.
>
> In Internet Explorer goto Tools -> Options -> Advanced and uncheck "Show
> Friendly HTTP errors". Then reload the page.
>
> If you get "Can not find server or DNS error" down the bottom of the page,
> then IIS isn't responding at all. Check httperr.log file on the server.
>
> If you get some kind of HTTP status code, then post that so we can analyze
> further what's going on.
>
> Cheers
> Ken
>
> "Brendan Grant" wrote in message
> news:A7B0A1A9-18B8-49B5-8DC2-1F6C847520FB@microsoft.com...
>>I have created a virtual directory in IIS6 on a 2k3 R2 SP2 server that
>>serves files fine when viewed over http, however I want to control access
>>and do so securely to this dir so I first disable anon access and require
>>basic authentication which works great for denying anon access and
>>requiring a valid login.
>>
>> Given that basic transmits its passwords in the clear I also check the
>> Require secure channel (SSL) option in Web Dir -> Properties -> Virtual
>> Directory -> Secure communications -> Edit... doing so denies access via
>> http however when I change the URL to begin with https, IE returns a
>> generic 'Internet Explorer cannot display this webpage.'
>>
>> The web site I'm doing this in is configured with the standard SSL port
>> of 443.
>>
>> For a sanity check I tried the above one more time on another 2k3 R2 SP2
>> box which already has a web app that works great over https (through
>> redirection) to an identical result.
>>
>> I suspect (but a dev and not an admin) this is certificate related...
>> which puzzles me even more because I've created and installed my own self
>> signed cert as well as used the one that already exists on the second
>> working box... only my dir still doesn't work.
>>
>> Aside from suggesting that a dev not be touching a server (which I'd
>> agree with :) )... any thoughts?
>>
>> Brendan
>