Solved

How to diagnose https connection not working

Posted on 2011-03-08
6
903 Views
Last Modified: 2012-05-11
Hi,
I successfully setup a test system using a ssl certificate / https website for the first time and now rolling out to a 'production' machine. I've installed a new certificate and setup pc (xp pro / iis5.1 - don't judge!) in the same way as my test machine as far as I can tell but when I try to access a page using https I get browser error 118 (operation timed out).
Can someone please help me diagnose the problem - here's my 2c worth so far..:
1. Site works fine on http (which I need to leave in place)
2. Checked port 443 is open on main router (shared offices so IT dept have confirmed this)
3. Disabled pc security software firewall (ESET)
Current website settings as shown in attached image.
Thanks.

server-website-settings.jpg
0
Comment
Question by:nigelr99
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
6 Comments
 
LVL 30

Accepted Solution

by:
Brad Howe earned 250 total points
ID: 35068839
If it is all good, install SSL diag and give it a test. After is searches, scroll to your site and verify certificate chain and root is installed.
Run, SSL Diagnostics to troubleshoot.

1. Firewall. you could test this by using telnet to port 443.  If it is open, it will connect and go black.
    eg: telnet your.domain.com 443

2. Does it browse locally?

3. SSL Diagnostics
x86
http://www.microsoft.com/downloads/en/details.aspx?familyid=cabea1d0-5a10-41bc-83d4-06c814265282&displaylang=en

x64
http://www.microsoft.com/downloads/en/details.aspx?FamilyID=1CBFB70E-F442-4BB2-940B-351C3A7D62CF&%3Bdisplaylang=en


Let us know,
Hades666
0
 

Author Comment

by:nigelr99
ID: 35070307
Thanks,

In response:
1. I disabled local firewall but telnet could still not connect. I had IT dept to re-check 443 port forwarding which they did.
2. I cannot connect locally using https://locahost
3. Ran ssldiag and had handshake error as shown in attached image.
Looked for some more information on the error number but struggling to find a way forward. Any ideas appreciated.

server-ssl-error.jpg
0
 
LVL 30

Expert Comment

by:Brad Howe
ID: 35070350
If you cannot connect even locally then it is not a firewall issue.

If you open up IIS Manager and review the directory Security for the certificate, is the entire chain present?

-Hades666
0
Simplifying Server Workload Migrations

This use case outlines the migration challenges that organizations face and how the Acronis AnyData Engine supports physical-to-physical (P2P), physical-to-virtual (P2V), virtual to physical (V2P), and cross-virtual (V2V) migration scenarios to address these challenges.

 
LVL 30

Expert Comment

by:Brad Howe
ID: 35070450
you may also what to verify the permissions on the machinekey folder.

Default permissions for the MachineKeys folders
http://support.microsoft.com/?id=278381 

Or

as simple a reboot...

Hades666
0
 

Author Comment

by:nigelr99
ID: 35073488
Ok, Certificate chain looks fine (see image) - I even tried removing / re-importing certificate.
Permissions on MachineKeys folder look OK.
Rebooted and still no joy. I'm sure I'm missing something simple here. IT dept is swapping router overnight but if I can't connect locally then there's not much point in that!
Any more ideas please?
Cheers.

server-cert-path.jpg
0
 

Author Comment

by:nigelr99
ID: 35087250
It turns out the 'IT dept' router uses https for remote management which has now been disabled and after re-installing certificate (out of desperation if nothing else) and then stopping and re-starting w3svc service it magically works!
Thanks for you help with diagnostics hades666 - I will award you the points. Cheers!
0

Featured Post

Resolve Critical IT Incidents Fast

If your data, services or processes become compromised, your organization can suffer damage in just minutes and how fast you communicate during a major IT incident is everything. Learn how to immediately identify incidents & best practices to resolve them quickly and effectively.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Prologue It is often required to host multiple websites on a single instance of IIS, mostly in development environments instead of on production servers. I am sure it is not much a preferred solution on production servers but this is at least a pos…
Introduction and Prerequisites This article describes methods for detecting whether a client browser accepts and returns HTTP cookies and whether the client browser runs JavaScript.  Most client browsers will, by default, be configured to use cooki…
How to Install VMware Tools in Red Hat Enterprise Linux 6.4 (RHEL 6.4) Step-by-Step Tutorial
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question