Advertisement

12.12.2007 at 12:31PM PST, ID: 23019488
[x]
Attachment Details
[x]
The Solution Rating System

With so many solutions, how can you tell which solutions are most likely to help you and which ones are not? To provide you with a tool to use, we rate our solutions based on various elements that most accurately determine if a solution is a quality solution. To explain what factors affect the solution rating, here are the elements we take into consideration when formulating our solution rating.

  • The Grade of the Solution
  • The Zone Rank of the Expert Providing the Solution
  • The Number of Author and Expert Comments
  • The Number of Experts Contributing
  • The Feedback of the Community

Your Input Matters
Because of the way the system is set up, the most important variable in this equation is you. As a member of Experts Exchange, you are able to cast your vote on the quality of the solutions in regard to how complete, accurate, helpful and easy to understand each solution is. When you provide your feedback, each rating is adjusted accordingly. So, if you see a solution that has a poor rating that you think is a good solution, let us know by rating it. As you do, the rating will be adjusted and will become more accurate for other members of our site.

If you have any suggestions that you would like to make for our rating system, please ask a question in the Suggestions Zone of Community Support.

Thank you!

7.4

Site stops working after new verisign certificate installed

Asked by Joeller in Secure Socket Layer (SSL) & HTTPS, Windows 2003 Server

Tags: , , , ,

Our company is moving a Website to a new dedicated server.  This website was configured as a separate website on its server.  It was configured to use SSL.  It was given a host header.  Another site was also set up using the same DNS but not using SSL. (So you could access ii using http://www.sitename.org for the unsecured site and https://www.sitename,org for the secured site.)  the secured website was previosuly using a "rool  your own" certificate on the old server.  We moved the to web applications to the new server, configured them as "websites" (The unsecured site was configured as the Default Website.)   After checking the site to ensure it was working, we applied for a Verisign certificate.  As this was taking some time and we needed a certifcate to continue testing we utilized MS Certificate Services on Windows Server 2003 to create a local certificate.  We install the created certificate on the server.  Then we deleted the pending request on the web site in the Web Server Certificate Wizard, and assigned an existing certificate using instruction found on the page "HOW TO: Install Imported Certificates on a Web Server in Windows Server 2003"  in Microsoft's Help and Support site.  The sites were given the needed Host headers.  These host headers were added to the hosts files of the machines of the user carrying out test along with the IP address of the server.  (The server has still not been made visible to the outside world.)    Everything was working fine.  Every control on every page fine in IE and in the area that have been tested with Firefox and Netscape. Then the verisign certificate finally arrived.  We were sent two files.  One was a 509 file and the other was a PKCS#7 file.  I copied the contents of the 509 file to an empty text file and saved it as a cer file.  I copied the contents of the PKCS#7 file to a text file and saved it as an spc file.  We again imported the certifcates to the server Certificate Store using instructions found on above cited page, removed the assigned "roll your own"  certificate from the site and assigned the new certificate, (the ones listed in the certificate store using the site's name), to the site.  Now IE states "Internet Explorer cannot display the Webpage."  No error message.  Use friendly http errors is turned off so that is not the reason it is displaying this non-error message.  The event viewer of the server reports "The SSL Server Credential certificate does not have a privatekey information property attached to it.  This most often happens when a certifcate is backed up incorrectly and later restored.  The message can also indicate a certificate enrollment failure."  When I put the "roll your own" certificate back on the web site everything works as it is supposed to.  

OK so what did I do wrong and how can I fix it. I am only allowed to issue 500 points at a shot.  So that's what I'm offering.  "Please help me Obi-wan Kenobi.  You're my only hope." Start Free Trial
[+][-]12.12.2007 at 01:11PM PST, ID: 20460198

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]12.12.2007 at 07:00PM PST, ID: 20462032

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]12.13.2007 at 05:33AM PST, ID: 20464119

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]12.13.2007 at 05:58AM PST, ID: 20464250

View this solution now by starting your 7-day free trial. Setting up your free trial is quick, easy, and secure. We will return you to this solution, unlocked, when you're done.

 

About this solution

Zones: Secure Socket Layer (SSL) & HTTPS, Windows 2003 Server
Tags: iis, certificate, ssl, verisign, working
Sign Up Now!
Solution Provided By: Joeller
Participating Experts: 2
Solution Grade: B
 
 
[+][-]12.13.2007 at 06:58PM PST, ID: 20469447

Experts Exchange has a courteous staff of administrators who help members get the most out of the website by means of administrative comments like this one.

Start your 7-day free trial to view this Administrative Comment or ask the Experts your question.

 
 
Loading Advertisement...
20080716-EE-VQP-32 / EE_QW_2_20070628