Welcome to ISAserver.org

Server cert different from web address

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 General ] >> Web Publishing >> Server cert different from web address

Page: [1]

Message

<< Older Topic Newer Topic >>

Server cert different from web address - 3.Dec.2007 2:37:13 PM

iwannabfishn

Posts: 63
Joined: 21.Jun.2004
Status: offline

I have an interesting problem I don't know that answer to. I am hoping someone out there knows the answer even if I don't want to here it!

I have a web email server. It has the name server1 on our domain. It is published to the internet on our ISA 2004 server by a different domain name and server name (server2.differentdomain.com). Is it possible to get a certificate that will have a name other than the actual domain name (an alias or something).

When I try to access the website now I get a warning that says "The security certificate presented by this website was issued for a different website's address."

***********************More Info*************************
I requested a test Certificate from Verisign. I was able to install a certificate with a different name and make it work. This was actually no problem at all. It would work fine if I was using IIS as the internal web server, but it is a Lotus Domino web server. I installed the certificate on the Lotus Notes server, and everything works perfectly internally. Appearantly, the ISA server needs the certificate to contain the private keys in order to be able to use it as an SSL cert. Therein lies my problem. I have been unable to figure out how to export a certificate from the Domino Certificate Admin database that ISA will recognize. If anyone can tell me how to do this I would greatly appreciate it. Thanks!

< Message edited by iwannabfishn -- 11.Dec.2007 1:59:46 PM >

Post #: 1

Featured Links*

RE: Server cert different from web address - 20.Dec.2007 2:14:22 PM

iwannabfishn

Posts: 63
Joined: 21.Jun.2004
Status: offline

OK, the solution to this problem is very easy and not with Lotus Notes at all. The Solution is to create a test website in IIS and import the certificate to IIS. After importing the certificate to IIS you can then turn right around and export it with the private keys for use with the ISA server. It works like a charm.

So it is possible to install a cert with a different machine name. Also, you can use a certificate exported from IIS for use in publishing an internal website even it you are using Lotus Domino as the web server.

(in reply to iwannabfishn)

Post #: 2