[isalist] Re: SSL OWA RPC
- From: "Jim Harrison" <Jim@xxxxxxxxxxxx>
- To: <isalist@xxxxxxxxxxxxx>
- Date: Fri, 31 Aug 2007 09:35:30 -0700
http://www.ISAserver.org
-------------------------------------------------------
Well, are you still trying to solve the following problem statement:
> Recently its been brought to my attention that one of my users cannot
> use https over rpc from the main office testing the config using
> https://mail.domain.com/rpc/rpcproxy.dll I get an error message
> internal error 500
?
If so, the answer is "quit testing it with a browser."
Do you have other failure indications from the reporting user?
Have you tried the testing methodology from the isablogs on the subject?
Jim
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Jim
Sent: Friday, August 31, 2007 9:29 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: SSL OWA RPC
http://www.ISAserver.org
-------------------------------------------------------
ISA 2004 is the version
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Jim Harrison
Sent: Friday, August 31, 2007 7:08 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: SSL OWA RPC
http://www.ISAserver.org
-------------------------------------------------------
Correct.
I meant "per IP listener".
The sad thing is that we don't' know which ISA version he's using, so
unless it's ISA 2006, it could well be "one per web listener".
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Thor (Hammer of God)
Sent: Friday, August 31, 2007 6:57 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: SSL OWA RPC
http://www.ISAserver.org
-------------------------------------------------------
Lastly, you meant one cert per IP, not once cert per listener, right?
You can assign a different cert for each IP the listener uses...
t
> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-
> bounce@xxxxxxxxxxxxx] On Behalf Of Jim Harrison
> Sent: Tuesday, August 28, 2007 12:23 PM
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] Re: SSL OWA RPC
>
> http://www.ISAserver.org
> -------------------------------------------------------
>
> I don't see anything that says you have a certificate problem?
> If you get the "500" error as a result of testing your RPC over HTTP
> publishing with a browser, this is expected. Have a read here
> http://blogs.technet.com/isablog/search.aspx?q=%22testing+RPC%22&p=1.
>
> To answer the question of certificate usage, you can only have one
> certificate per web listener.
>
>
> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-
> bounce@xxxxxxxxxxxxx]
> On Behalf Of James May
> Sent: Tuesday, August 28, 2007 12:11 PM
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] SSL OWA RPC
>
> IS it possible to use 2 different ssl certs on isa 2004 one for https
> over rpc and one for OWA
>
>
>
> I have one cert mail.domain.com
>
> One for www.domain.com
>
>
>
> Using 2 different publishing rules. One for www owa and one for the
> https over rpc
>
>
>
> Recently its been brought to my attention that one of my users cannot
> use https over rpc from the main office testing the config using
> https://mail.domain.com/rpc/rpcproxy.dll I get an error message
> internal error 500
>
>
>
> The www.domain.com is the cert on the internal exchange box
>
>
>
> The isa box is using mail.domain.com cert it seems to work everywhere
> except the corporate office however it fails the rpcproxy.dll test.
>
>
>
> James May
>
> Defense Group Inc
>
> Santa Monia, CA 90401
>
> jmay@xxxxxxxxxx
>
>
>
>
> All mail to and from this domain is GFI-scanned.
>
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials:
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
All mail to and from this domain is GFI-scanned.
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
All mail to and from this domain is GFI-scanned.
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
Other related posts:
