IIS7 and up : SSL certificates on Sites with Host Headers

Today I got the following question:

“I have two sites (siteV1.mysite.com and sitev2.mysite.com). They listen on the same IP address and port. We generated a certificate for siteV1.mysite.com and SSL is working properly. The problem is that some of our customers use siteV2.mysite.com and they are getting certificate errors. What’s the problem?”

No Comments
Jul, 21, 2011
Angelo Schalley
Active Directory, Certificates, IIS, Networking, security, Windows-Microsoft

on the local domain controller create a request :

;—————– request.inf —————–
[Version]
Signature=”$Windows NT$

[NewRequest]
Subject = “CN=<dc01.domain.local>” ; replace with the FQDN of the DC
KeySpec = 1
KeyLength = 1024
; Can be 1024, 2048, 4096, 8192, or 16384.
; Larger key sizes are more secure, but have
; a greater impact on performance.
Exportable = TRUE
MachineKeySet = TRUE
SMIME = False
PrivateKeyArchive = FALSE
UserProtected = FALSE
UseExistingKeySet = FALSE
ProviderName = “Microsoft RSA SChannel Cryptographic Provider”
ProviderType = 12
RequestType = PKCS10
KeyUsage = 0xa0
[EnhancedKeyUsageExtension]
OID=1.3.6.1.5.5.7.3.1 ; this is for Server Authentication

No Comments
Mar, 12, 2011
Angelo Schalley
html / php, IIS, joomla, Linux, Plesk Linux, Plesk Windows

put a file in your websites root directory or a in some folder :

info.php :

<?php
phpinfo();
?>

save and give execute writes : chmod +x

Category Archives: IIS

IIS7 and up : SSL certificates on Sites with Host Headers

LDAPS windows 2008 R2 – external domain – CA

Make a php info test file on your webserver

Categories