[Last Call] Learn about multicloud storage options and how to improve your company's cloud strategy. Register Now

x
?
Solved

Trouble accessing OWA - HTTP:// returns must use HTTPS://  - HTTPS returns page not found

Posted on 2006-11-12
7
Medium Priority
?
304 Views
Last Modified: 2010-03-06
Hello,

I have removed and reinstalled a new security cert on my server.  Now when accessing Outllook Web Access I seem to have some issues:

Obviously I want it to use SSL.

When I connect to the site using standard http I get an error that says I must use HTTPS...  But when I connect using HTTPS it says the page cannot be found.  IT all worked before I screwed with the cert.

=====================================================================================
HTTP EXAMPLE

The page must be viewed over a secure channel
The page you are trying to access is secured with Secure Sockets Layer (SSL).
--------------------------------------------------------------------------------

Please try the following:

Type https:// at the beginning of the address you are attempting to reach and press ENTER.
HTTP Error 403.4 - Forbidden: SSL is required to view this resource.
Internet Information Services (IIS)
===========================================================================================
HTTPS EXAMPLE

The page cannot be displayed
The page you are looking for is currently unavailable. The Web site might be experiencing technical difficulties, or you may need to adjust your browser settings.

--------------------------------------------------------------------------------

Please try the following:

Click the  Refresh button, or try again later.

If you typed the page address in the Address bar, make sure that it is spelled correctly.

To check your connection settings, click the Tools menu, and then click Internet Options. On the Connections tab, click Settings. The settings should match those provided by your local area network (LAN) administrator or Internet service provider (ISP).
See if your Internet connection settings are being detected. You can set Microsoft Windows to examine your network and automatically discover network connection settings (if your network administrator has enabled this setting).
Click the Tools menu, and then click Internet Options.
On the Connections tab, click LAN Settings.
Select Automatically detect settings, and then click OK.
Some sites require 128-bit connection security. Click the Help menu and then click About Internet Explorer to determine what strength security you have installed.
If you are trying to reach a secure site, make sure your Security settings can support it. Click the Tools menu, and then click Internet Options. On the Advanced tab, scroll to the Security section and check settings for SSL 2.0, SSL 3.0, TLS 1.0, PCT 1.0.
Click the  Back button to try another link.

=======================================================================================================

 
0
Comment
Question by:caw01
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 3
7 Comments
 
LVL 104

Accepted Solution

by:
Sembee earned 2000 total points
ID: 17925702
Turn off REQUIRE SSL on all directories connected with Exchange.
Don't confuse the setting to require SSL with your ability to use SSL.

Once you have require SSL disabled, drop in to a command prompt and type

iisreset

The test again, on both http and https

Simon.
0
 

Author Comment

by:caw01
ID: 17931341
I have unchecked the "require ssl" at the default web site level and have confirmed that the exchange virtual pages no longer have that value checked but I am having the same result.  

- Chris
0
 
LVL 104

Expert Comment

by:Sembee
ID: 17931508
Did you run iisreset?
After removing that option you shouldn't get the SSL prompt any further.

Make sure that you removed the setting from

/exchange
/exchweb
/exadmin
/public

at least.

Simon.
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 

Author Comment

by:caw01
ID: 17931550
I have verified that the option is off of those.  And I did do the IISRESET several times.  I'll try it again.

should I have Ignore Client Certs checked or Accept?
0
 

Author Comment

by:caw01
ID: 17931704
Ok, I have confirmed that everything is off.  Now when I use HTTP everything works just fine.

But when I use HTTPS, I still get this:

 The page cannot be displayed
The page you are looking for is currently unavailable. The Web site might be experiencing technical difficulties, or you may need to adjust your browser settings.

--------------------------------------------------------------------------------

Please try the following:

Click the  Refresh button, or try again later.

If you typed the page address in the Address bar, make sure that it is spelled correctly.

To check your connection settings, click the Tools menu, and then click Internet Options. On the Connections tab, click Settings. The settings should match those provided by your local area network (LAN) administrator or Internet service provider (ISP).
See if your Internet connection settings are being detected. You can set Microsoft Windows to examine your network and automatically discover network connection settings (if your network administrator has enabled this setting).
Click the Tools menu, and then click Internet Options.
On the Connections tab, click LAN Settings.
Select Automatically detect settings, and then click OK.
Some sites require 128-bit connection security. Click the Help menu and then click About Internet Explorer to determine what strength security you have installed.
If you are trying to reach a secure site, make sure your Security settings can support it. Click the Tools menu, and then click Internet Options. On the Advanced tab, scroll to the Security section and check settings for SSL 2.0, SSL 3.0, TLS 1.0, PCT 1.0.
Click the  Back button to try another link.



Cannot find server or DNS Error
Internet Explorer  
0
 
LVL 104

Expert Comment

by:Sembee
ID: 17932189
That would appear that SSL hasn't been setup correctly.
Export your certificate, then remove it. Run IISRESET again. When you look in IIS manager you should find the SSL port column is empty.

Then reinstall the SSL certificate by importing it. Don't request a new certificate, as you already have one.

Simon.
0
 

Author Comment

by:caw01
ID: 17935040
too bad you cant split that twice on the same person.  There was an issue with my cert AND I needed to turn off the require auth.
0

Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

New style of hardware planning for Microsoft Exchange server.
Know the reasons and solutions to move/import EDB to New Exchange Server. Also, find out how to recover an Exchange .edb file and to restore the file back.
To show how to create a transport rule in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Rules tab.:  To cr…
The basic steps you have just learned will be implemented in this video. The basic steps are shown to configure an Exchange DAG in a live working Exchange Server Environment and manage the same (Exchange Server 2010 Software is used in a Windows Ser…

650 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question