Welcome to ISAserver.org

SSL Bridging - select certificate

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Publishing] >> Exchange Publishing >> SSL Bridging - select certificate

Page: [1]

Message

<< Older Topic Newer Topic >>

SSL Bridging - select certificate - 31.Mar.2008 7:35:34 AM

yuri.gmt

Posts: 13
Joined: 31.Mar.2008
From: The Netherlands
Status: offline

Hi there,

I would like to publish OWA with SSL.
It goes very well via the internal network.
From the internet I get this error: “Error Code: 500 Internal Server Error. The certificate chain was issued by an authority that is not trusted.”

I think it has to do with the Bridging tab in the publishing rule:
- I have to redirect requests to SLL port: 443
- Select Use a certificate to authenticate to the SSL Web server
- and Select a certificate.
The problem I’m facing is that there is no certificate to select in that view.
Error: “No valid certificates were found on this server.”

However, I managed to install the certificate on the ISA server successfully because I used it already in the Listner (same publishing rule, same server).

Probably I overlooked something.
Can you help me?

Sincerely.
Yuri

Post #: 1

Featured Links*

RE: SSL Bridging - select certificate - 31.Mar.2008 8:08:18 AM

yuri.gmt

Posts: 13
Joined: 31.Mar.2008
From: The Netherlands
Status: offline

I've checked if the ISA Server trust the certificate from the published Web server.
>> The CA certificate is in the ISA Server Trusted Root Certification Authorities certificate store.

(in reply to yuri.gmt)

Post #: 2

RE: SSL Bridging - select certificate - 1.Apr.2008 3:26:28 AM

yuri.gmt

Posts: 13
Joined: 31.Mar.2008
From: The Netherlands
Status: offline

Also the internal name match the external name: mail.corp.org
This is also configured in the To field of the publishing rule.

(in reply to yuri.gmt)

Post #: 3

RE: SSL Bridging - select certificate - 1.Apr.2008 4:34:35 AM

yuri.gmt

Posts: 13
Joined: 31.Mar.2008
From: The Netherlands
Status: offline

I must say, when I check the Certification Path via de MMC - Certificates it give me: Certificate Status: "The issuer of this certificate could not be found."
Certificate information: "Windows does not have enough information to verify this certificate."
But the Issuer certificate is also in the Trusted Root Certification Authorities store.

** update **
This problem is solved. The certification is correctly installed.

But still, after the logon, I get the same error as described in the first post.

< Message edited by yuri.gmt -- 3.Apr.2008 6:00:06 AM >

(in reply to yuri.gmt)

Post #: 4

RE: SSL Bridging - select certificate - 1.Apr.2008 7:23:27 AM

jmchristy

Posts: 8
Joined: 31.Mar.2008
Status: offline

I would follow the instructions on these pages here.
http://www.msexchange.org/articles/owa2003pub3.html
http://isaserver.org/tutorials/pubowa2003part4.html

I however got my Certificate from a on-line cert provider. I took that information they sent to me and created a .cer file which I uploaded to my Exchange IIS. I then exported the file, created a .pfx file and I uploaded that to my ISA certificates store.

Just follow the directions above and that should clear up any issues you are having with your certificate. I would wipe out everything you've already done with the certificates and start fresh.

Hope this helps.

(in reply to yuri.gmt)

Post #: 5

RE: SSL Bridging - select certificate - 3.Apr.2008 10:50:26 AM

yuri.gmt

Posts: 13
Joined: 31.Mar.2008
From: The Netherlands
Status: offline

Hi everybody,The problem is solved.I contacted the 3rd party certificate company.They have sent me the correct Certificate Authority.I installed the correct CA in the Trusted Root Certification Authorities on the ISA 2006 and now it works perfectly.

So no certificate on the bridging tab required....

Cheers,
Yuri

(in reply to jmchristy)

Post #: 6