[isalist] Re: SSL OWA RPC

http://www.ISAserver.org
-------------------------------------------------------

At least we resolved the "client certificate" issue ;)

Thomas W Shinder, M.D.
Site: www.isaserver.org
Blog: http://blogs.isaserver.org/shinder/
Book: http://tinyurl.com/3xqb7
MVP -- Microsoft Firewalls (ISA)

 

> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx 
> [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Thor 
> (Hammer of God)
> Sent: Friday, August 31, 2007 9:15 AM
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] Re: SSL OWA RPC
> 
> http://www.ISAserver.org
> -------------------------------------------------------
>   
> Yeah- just making sure we're on our P's and Q's considering 
> the level of
> detail we've been getting into on the lists over the last few days
> (ISAPros more so, of course).
> t 
> 
> > -----Original Message-----
> > From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-
> > bounce@xxxxxxxxxxxxx] On Behalf Of Jim Harrison
> > Sent: Friday, August 31, 2007 7:08 AM
> > To: isalist@xxxxxxxxxxxxx
> > Subject: [isalist] Re: SSL OWA RPC
> > 
> > http://www.ISAserver.org
> > -------------------------------------------------------
> > 
> > Correct.
> > I meant "per IP listener".
> > The sad thing is that we don't' know which ISA version he's 
> using, so
> > unless it's ISA 2006, it could well be "one per web listener".
> > 
> > -----Original Message-----
> > From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-
> > bounce@xxxxxxxxxxxxx]
> > On Behalf Of Thor (Hammer of God)
> > Sent: Friday, August 31, 2007 6:57 AM
> > To: isalist@xxxxxxxxxxxxx
> > Subject: [isalist] Re: SSL OWA RPC
> > 
> > http://www.ISAserver.org
> > -------------------------------------------------------
> > 
> > Lastly, you meant one cert per IP, not once cert per 
> listener, right?
> > You can assign a different cert for each IP the listener uses...
> > 
> > t
> > 
> > > -----Original Message-----
> > > From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-
> > > bounce@xxxxxxxxxxxxx] On Behalf Of Jim Harrison
> > > Sent: Tuesday, August 28, 2007 12:23 PM
> > > To: isalist@xxxxxxxxxxxxx
> > > Subject: [isalist] Re: SSL OWA RPC
> > >
> > > http://www.ISAserver.org
> > > -------------------------------------------------------
> > >
> > > I don't see anything that says you have a certificate problem?
> > > If you get the "500" error as a result of testing your 
> RPC over HTTP
> > > publishing with a browser, this is expected.  Have a read here
> > >
> http://blogs.technet.com/isablog/search.aspx?q=%22testing+RPC%22&p=1.
> > >
> > > To answer the question of certificate usage, you can only have one
> > > certificate per web listener.
> > >
> > >
> > > -----Original Message-----
> > > From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-
> > > bounce@xxxxxxxxxxxxx]
> > > On Behalf Of James May
> > > Sent: Tuesday, August 28, 2007 12:11 PM
> > > To: isalist@xxxxxxxxxxxxx
> > > Subject: [isalist] SSL OWA RPC
> > >
> > > IS it possible to use 2 different ssl certs on isa 2004 one for
> https
> > > over rpc and one for OWA
> > >
> > >
> > >
> > > I have one cert mail.domain.com
> > >
> > > One for www.domain.com
> > >
> > >
> > >
> > > Using 2 different publishing rules. One for www owa and 
> one for the
> > > https over rpc
> > >
> > >
> > >
> > > Recently  its been brought to my attention that one of my users
> > cannot
> > > use https over rpc from the main office testing the config using
> > > https://mail.domain.com/rpc/rpcproxy.dll  I get an error message
> > > internal error 500
> > >
> > >
> > >
> > > The www.domain.com is the cert on the internal exchange box
> > >
> > >
> > >
> > > The isa box is using mail.domain.com cert it seems to work
> everywhere
> > > except the corporate office however it fails the 
> rpcproxy.dll test.
> > >
> > >
> > >
> > > James May
> > >
> > > Defense Group Inc
> > >
> > > Santa Monia, CA 90401
> > >
> > > jmay@xxxxxxxxxx
> > >
> > >
> > >
> > >
> > > All mail to and from this domain is GFI-scanned.
> > >
> > > ------------------------------------------------------
> > > List Archives: http://www.freelists.org/archives/isalist/
> > > ISA Server Newsletter: 
> http://www.isaserver.org/pages/newsletter.asp
> > > ISA Server Articles and Tutorials:
> > > http://www.isaserver.org/articles_tutorials/
> > > ISA Server Blogs: http://blogs.isaserver.org/
> > > ------------------------------------------------------
> > > Visit TechGenix.com for more information about our other sites:
> > > http://www.techgenix.com
> > > ------------------------------------------------------
> > > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> > > Report abuse to listadmin@xxxxxxxxxxxxx
> > 
> > ------------------------------------------------------
> > List Archives: http://www.freelists.org/archives/isalist/
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server Articles and Tutorials:
> > http://www.isaserver.org/articles_tutorials/
> > ISA Server Blogs: http://blogs.isaserver.org/
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com
> > ------------------------------------------------------
> > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> > Report abuse to listadmin@xxxxxxxxxxxxx
> > 
> > 
> > All mail to and from this domain is GFI-scanned.
> > 
> > ------------------------------------------------------
> > List Archives: http://www.freelists.org/archives/isalist/
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server Articles and Tutorials:
> > http://www.isaserver.org/articles_tutorials/
> > ISA Server Blogs: http://blogs.isaserver.org/
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com
> > ------------------------------------------------------
> > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> > Report abuse to listadmin@xxxxxxxxxxxxx
> 
> ------------------------------------------------------
> List Archives: http://www.freelists.org/archives/isalist/  
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp 
> ISA Server Articles and Tutorials: 
> http://www.isaserver.org/articles_tutorials/ 
> ISA Server Blogs: http://blogs.isaserver.org/ 
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com 
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp 
> Report abuse to listadmin@xxxxxxxxxxxxx 
> 
> 
> 
------------------------------------------------------
List Archives: http://www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx

Other related posts: