• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 308
  • Last Modified:

Trouble accessing OWA - HTTP:// returns must use HTTPS:// - HTTPS returns page not found

Hello,

I have removed and reinstalled a new security cert on my server.  Now when accessing Outllook Web Access I seem to have some issues:

Obviously I want it to use SSL.

When I connect to the site using standard http I get an error that says I must use HTTPS...  But when I connect using HTTPS it says the page cannot be found.  IT all worked before I screwed with the cert.

=====================================================================================
HTTP EXAMPLE

The page must be viewed over a secure channel
The page you are trying to access is secured with Secure Sockets Layer (SSL).
--------------------------------------------------------------------------------

Please try the following:

Type https:// at the beginning of the address you are attempting to reach and press ENTER.
HTTP Error 403.4 - Forbidden: SSL is required to view this resource.
Internet Information Services (IIS)
===========================================================================================
HTTPS EXAMPLE

The page cannot be displayed
The page you are looking for is currently unavailable. The Web site might be experiencing technical difficulties, or you may need to adjust your browser settings.

--------------------------------------------------------------------------------

Please try the following:

Click the  Refresh button, or try again later.

If you typed the page address in the Address bar, make sure that it is spelled correctly.

To check your connection settings, click the Tools menu, and then click Internet Options. On the Connections tab, click Settings. The settings should match those provided by your local area network (LAN) administrator or Internet service provider (ISP).
See if your Internet connection settings are being detected. You can set Microsoft Windows to examine your network and automatically discover network connection settings (if your network administrator has enabled this setting).
Click the Tools menu, and then click Internet Options.
On the Connections tab, click LAN Settings.
Select Automatically detect settings, and then click OK.
Some sites require 128-bit connection security. Click the Help menu and then click About Internet Explorer to determine what strength security you have installed.
If you are trying to reach a secure site, make sure your Security settings can support it. Click the Tools menu, and then click Internet Options. On the Advanced tab, scroll to the Security section and check settings for SSL 2.0, SSL 3.0, TLS 1.0, PCT 1.0.
Click the  Back button to try another link.

=======================================================================================================

 
0
caw01
Asked:
caw01
  • 4
  • 3
1 Solution
 
SembeeCommented:
Turn off REQUIRE SSL on all directories connected with Exchange.
Don't confuse the setting to require SSL with your ability to use SSL.

Once you have require SSL disabled, drop in to a command prompt and type

iisreset

The test again, on both http and https

Simon.
0
 
caw01Author Commented:
I have unchecked the "require ssl" at the default web site level and have confirmed that the exchange virtual pages no longer have that value checked but I am having the same result.  

- Chris
0
 
SembeeCommented:
Did you run iisreset?
After removing that option you shouldn't get the SSL prompt any further.

Make sure that you removed the setting from

/exchange
/exchweb
/exadmin
/public

at least.

Simon.
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 
caw01Author Commented:
I have verified that the option is off of those.  And I did do the IISRESET several times.  I'll try it again.

should I have Ignore Client Certs checked or Accept?
0
 
caw01Author Commented:
Ok, I have confirmed that everything is off.  Now when I use HTTP everything works just fine.

But when I use HTTPS, I still get this:

 The page cannot be displayed
The page you are looking for is currently unavailable. The Web site might be experiencing technical difficulties, or you may need to adjust your browser settings.

--------------------------------------------------------------------------------

Please try the following:

Click the  Refresh button, or try again later.

If you typed the page address in the Address bar, make sure that it is spelled correctly.

To check your connection settings, click the Tools menu, and then click Internet Options. On the Connections tab, click Settings. The settings should match those provided by your local area network (LAN) administrator or Internet service provider (ISP).
See if your Internet connection settings are being detected. You can set Microsoft Windows to examine your network and automatically discover network connection settings (if your network administrator has enabled this setting).
Click the Tools menu, and then click Internet Options.
On the Connections tab, click LAN Settings.
Select Automatically detect settings, and then click OK.
Some sites require 128-bit connection security. Click the Help menu and then click About Internet Explorer to determine what strength security you have installed.
If you are trying to reach a secure site, make sure your Security settings can support it. Click the Tools menu, and then click Internet Options. On the Advanced tab, scroll to the Security section and check settings for SSL 2.0, SSL 3.0, TLS 1.0, PCT 1.0.
Click the  Back button to try another link.



Cannot find server or DNS Error
Internet Explorer  
0
 
SembeeCommented:
That would appear that SSL hasn't been setup correctly.
Export your certificate, then remove it. Run IISRESET again. When you look in IIS manager you should find the SSL port column is empty.

Then reinstall the SSL certificate by importing it. Don't request a new certificate, as you already have one.

Simon.
0
 
caw01Author Commented:
too bad you cant split that twice on the same person.  There was an issue with my cert AND I needed to turn off the require auth.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Get expert help—faster!

Need expert help—fast? Use the Help Bell for personalized assistance getting answers to your important questions.

  • 4
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now