Solved

Trouble accessing OWA - HTTP:// returns must use HTTPS://  - HTTPS returns page not found

Posted on 2006-11-12
7
295 Views
Last Modified: 2010-03-06
Hello,

I have removed and reinstalled a new security cert on my server.  Now when accessing Outllook Web Access I seem to have some issues:

Obviously I want it to use SSL.

When I connect to the site using standard http I get an error that says I must use HTTPS...  But when I connect using HTTPS it says the page cannot be found.  IT all worked before I screwed with the cert.

=====================================================================================
HTTP EXAMPLE

The page must be viewed over a secure channel
The page you are trying to access is secured with Secure Sockets Layer (SSL).
--------------------------------------------------------------------------------

Please try the following:

Type https:// at the beginning of the address you are attempting to reach and press ENTER.
HTTP Error 403.4 - Forbidden: SSL is required to view this resource.
Internet Information Services (IIS)
===========================================================================================
HTTPS EXAMPLE

The page cannot be displayed
The page you are looking for is currently unavailable. The Web site might be experiencing technical difficulties, or you may need to adjust your browser settings.

--------------------------------------------------------------------------------

Please try the following:

Click the  Refresh button, or try again later.

If you typed the page address in the Address bar, make sure that it is spelled correctly.

To check your connection settings, click the Tools menu, and then click Internet Options. On the Connections tab, click Settings. The settings should match those provided by your local area network (LAN) administrator or Internet service provider (ISP).
See if your Internet connection settings are being detected. You can set Microsoft Windows to examine your network and automatically discover network connection settings (if your network administrator has enabled this setting).
Click the Tools menu, and then click Internet Options.
On the Connections tab, click LAN Settings.
Select Automatically detect settings, and then click OK.
Some sites require 128-bit connection security. Click the Help menu and then click About Internet Explorer to determine what strength security you have installed.
If you are trying to reach a secure site, make sure your Security settings can support it. Click the Tools menu, and then click Internet Options. On the Advanced tab, scroll to the Security section and check settings for SSL 2.0, SSL 3.0, TLS 1.0, PCT 1.0.
Click the  Back button to try another link.

=======================================================================================================

 
0
Comment
Question by:caw01
  • 4
  • 3
7 Comments
 
LVL 104

Accepted Solution

by:
Sembee earned 500 total points
ID: 17925702
Turn off REQUIRE SSL on all directories connected with Exchange.
Don't confuse the setting to require SSL with your ability to use SSL.

Once you have require SSL disabled, drop in to a command prompt and type

iisreset

The test again, on both http and https

Simon.
0
 

Author Comment

by:caw01
ID: 17931341
I have unchecked the "require ssl" at the default web site level and have confirmed that the exchange virtual pages no longer have that value checked but I am having the same result.  

- Chris
0
 
LVL 104

Expert Comment

by:Sembee
ID: 17931508
Did you run iisreset?
After removing that option you shouldn't get the SSL prompt any further.

Make sure that you removed the setting from

/exchange
/exchweb
/exadmin
/public

at least.

Simon.
0
Do email signature updates give you a headache?

Constantly trying to correctly format email signatures? Spending all of your time at every user’s desk to make updates? Want high-quality HTML signatures on all devices, including on mobiles and Macs? Then, let Exclaimer solve all your email signature problems today!

 

Author Comment

by:caw01
ID: 17931550
I have verified that the option is off of those.  And I did do the IISRESET several times.  I'll try it again.

should I have Ignore Client Certs checked or Accept?
0
 

Author Comment

by:caw01
ID: 17931704
Ok, I have confirmed that everything is off.  Now when I use HTTP everything works just fine.

But when I use HTTPS, I still get this:

 The page cannot be displayed
The page you are looking for is currently unavailable. The Web site might be experiencing technical difficulties, or you may need to adjust your browser settings.

--------------------------------------------------------------------------------

Please try the following:

Click the  Refresh button, or try again later.

If you typed the page address in the Address bar, make sure that it is spelled correctly.

To check your connection settings, click the Tools menu, and then click Internet Options. On the Connections tab, click Settings. The settings should match those provided by your local area network (LAN) administrator or Internet service provider (ISP).
See if your Internet connection settings are being detected. You can set Microsoft Windows to examine your network and automatically discover network connection settings (if your network administrator has enabled this setting).
Click the Tools menu, and then click Internet Options.
On the Connections tab, click LAN Settings.
Select Automatically detect settings, and then click OK.
Some sites require 128-bit connection security. Click the Help menu and then click About Internet Explorer to determine what strength security you have installed.
If you are trying to reach a secure site, make sure your Security settings can support it. Click the Tools menu, and then click Internet Options. On the Advanced tab, scroll to the Security section and check settings for SSL 2.0, SSL 3.0, TLS 1.0, PCT 1.0.
Click the  Back button to try another link.



Cannot find server or DNS Error
Internet Explorer  
0
 
LVL 104

Expert Comment

by:Sembee
ID: 17932189
That would appear that SSL hasn't been setup correctly.
Export your certificate, then remove it. Run IISRESET again. When you look in IIS manager you should find the SSL port column is empty.

Then reinstall the SSL certificate by importing it. Don't request a new certificate, as you already have one.

Simon.
0
 

Author Comment

by:caw01
ID: 17935040
too bad you cant split that twice on the same person.  There was an issue with my cert AND I needed to turn off the require auth.
0

Featured Post

Free Trending Threat Insights Every Day

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

Join & Write a Comment

Check out this infographic on what you need to make a good email signature that will work perfectly for your organization.
Exchange server is not supported in any cloud-hosted platform (other than Azure with Azure Premium Storage).
In this video we show how to create a Resource Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: Navigate to the Recipients >> Resources tab.: "Recipients" is our default selection …
The basic steps you have just learned will be implemented in this video. The basic steps are shown to configure an Exchange DAG in a live working Exchange Server Environment and manage the same (Exchange Server 2010 Software is used in a Windows Ser…

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now