Solved

Trouble accessing OWA - HTTP:// returns must use HTTPS://  - HTTPS returns page not found

Posted on 2006-11-12
7
298 Views
Last Modified: 2010-03-06
Hello,

I have removed and reinstalled a new security cert on my server.  Now when accessing Outllook Web Access I seem to have some issues:

Obviously I want it to use SSL.

When I connect to the site using standard http I get an error that says I must use HTTPS...  But when I connect using HTTPS it says the page cannot be found.  IT all worked before I screwed with the cert.

=====================================================================================
HTTP EXAMPLE

The page must be viewed over a secure channel
The page you are trying to access is secured with Secure Sockets Layer (SSL).
--------------------------------------------------------------------------------

Please try the following:

Type https:// at the beginning of the address you are attempting to reach and press ENTER.
HTTP Error 403.4 - Forbidden: SSL is required to view this resource.
Internet Information Services (IIS)
===========================================================================================
HTTPS EXAMPLE

The page cannot be displayed
The page you are looking for is currently unavailable. The Web site might be experiencing technical difficulties, or you may need to adjust your browser settings.

--------------------------------------------------------------------------------

Please try the following:

Click the  Refresh button, or try again later.

If you typed the page address in the Address bar, make sure that it is spelled correctly.

To check your connection settings, click the Tools menu, and then click Internet Options. On the Connections tab, click Settings. The settings should match those provided by your local area network (LAN) administrator or Internet service provider (ISP).
See if your Internet connection settings are being detected. You can set Microsoft Windows to examine your network and automatically discover network connection settings (if your network administrator has enabled this setting).
Click the Tools menu, and then click Internet Options.
On the Connections tab, click LAN Settings.
Select Automatically detect settings, and then click OK.
Some sites require 128-bit connection security. Click the Help menu and then click About Internet Explorer to determine what strength security you have installed.
If you are trying to reach a secure site, make sure your Security settings can support it. Click the Tools menu, and then click Internet Options. On the Advanced tab, scroll to the Security section and check settings for SSL 2.0, SSL 3.0, TLS 1.0, PCT 1.0.
Click the  Back button to try another link.

=======================================================================================================

 
0
Comment
Question by:caw01
  • 4
  • 3
7 Comments
 
LVL 104

Accepted Solution

by:
Sembee earned 500 total points
ID: 17925702
Turn off REQUIRE SSL on all directories connected with Exchange.
Don't confuse the setting to require SSL with your ability to use SSL.

Once you have require SSL disabled, drop in to a command prompt and type

iisreset

The test again, on both http and https

Simon.
0
 

Author Comment

by:caw01
ID: 17931341
I have unchecked the "require ssl" at the default web site level and have confirmed that the exchange virtual pages no longer have that value checked but I am having the same result.  

- Chris
0
 
LVL 104

Expert Comment

by:Sembee
ID: 17931508
Did you run iisreset?
After removing that option you shouldn't get the SSL prompt any further.

Make sure that you removed the setting from

/exchange
/exchweb
/exadmin
/public

at least.

Simon.
0
Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

 

Author Comment

by:caw01
ID: 17931550
I have verified that the option is off of those.  And I did do the IISRESET several times.  I'll try it again.

should I have Ignore Client Certs checked or Accept?
0
 

Author Comment

by:caw01
ID: 17931704
Ok, I have confirmed that everything is off.  Now when I use HTTP everything works just fine.

But when I use HTTPS, I still get this:

 The page cannot be displayed
The page you are looking for is currently unavailable. The Web site might be experiencing technical difficulties, or you may need to adjust your browser settings.

--------------------------------------------------------------------------------

Please try the following:

Click the  Refresh button, or try again later.

If you typed the page address in the Address bar, make sure that it is spelled correctly.

To check your connection settings, click the Tools menu, and then click Internet Options. On the Connections tab, click Settings. The settings should match those provided by your local area network (LAN) administrator or Internet service provider (ISP).
See if your Internet connection settings are being detected. You can set Microsoft Windows to examine your network and automatically discover network connection settings (if your network administrator has enabled this setting).
Click the Tools menu, and then click Internet Options.
On the Connections tab, click LAN Settings.
Select Automatically detect settings, and then click OK.
Some sites require 128-bit connection security. Click the Help menu and then click About Internet Explorer to determine what strength security you have installed.
If you are trying to reach a secure site, make sure your Security settings can support it. Click the Tools menu, and then click Internet Options. On the Advanced tab, scroll to the Security section and check settings for SSL 2.0, SSL 3.0, TLS 1.0, PCT 1.0.
Click the  Back button to try another link.



Cannot find server or DNS Error
Internet Explorer  
0
 
LVL 104

Expert Comment

by:Sembee
ID: 17932189
That would appear that SSL hasn't been setup correctly.
Export your certificate, then remove it. Run IISRESET again. When you look in IIS manager you should find the SSL port column is empty.

Then reinstall the SSL certificate by importing it. Don't request a new certificate, as you already have one.

Simon.
0
 

Author Comment

by:caw01
ID: 17935040
too bad you cant split that twice on the same person.  There was an issue with my cert AND I needed to turn off the require auth.
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Scam emails are a huge burden for many businesses. Spotting one is not always easy. Follow our tips to identify if an email you receive is a scam.
This article explains how to install and use the NTBackup utility that comes with Windows Server.
In this video we show how to create an Accepted Domain in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Ac…
In this video we show how to create an email address policy in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Mail Flow…

803 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question