Posts: 14
Joined: 1.Oct.2001
From: Hartford, CT, USA
Status: offline
I have been trying and trying to publish a web site using SSL and am having no luck. I have not heard anyone talk about this particular problem, if it has been discussed and I just have not found it than I apologize.
I have set up everything according to the book. I am trying to publish a site using SSL and terminatiung the connection at ISA. When I go to the site (from the inside and the outside) using http://www.mysite.com I get the 403 error telling me to use https. When I do that, I get a DNS error. I have tried using a Microsoft generated certificate and a verisign test certificate and both have produced the same error. The destination set for the site lists www.mysite.com and the publishing rule redirects to an IP address. I have tried it with and without host headers, and have tried adding https://www.mysite.com to the Destination set. The site does work if I remove the SSL requirement. Any help would be appreciated.
Posts: 14
Joined: 1.Oct.2001
From: Hartford, CT, USA
Status: offline
Hi Tom,
Thanks for the reply and the great book as well! In my destination set I have always had www.domain.com, I just added the https\\ line in response to the DNS error I receive when trying to use https. I also have tried using the FQDN in the redirect this web site box in the Web publishing configuration after adding an entry for my internal web server in the hosts file of the ISA server and I still get that Server or DNS error message.
Posts: 14
Joined: 1.Oct.2001
From: Hartford, CT, USA
Status: offline
I have been able to solve my problem. We had an instance of IIS running on the ISA server because it is also an Exchange Front End Server and that instance was binding to port 443, prevetning ISA from listening on that port. There are not any web sites on that server accept the default site, and it did not appear to have 443 bound to it, but I guess it did somewhere because when I stopped that service netstat -na showed ISA bound to 443 on the external interface. Thanks again Tom for your help.