RE: OWA with SSL Certificate

  • From: "Thomas W Shinder" <tshinder@xxxxxxxxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Tue, 28 Oct 2003 20:24:02 -0600

OK, time for the definitive answer.

Read the article on installing DNS on ISA firewalls over at
www.isaserver.org

HTH,
Tom

Thomas W Shinder
www.isaserver.org/shinder 
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp

 


-----Original Message-----
From: Steve Moffat [mailto:steve@xxxxxxxxxxxxxxxxxxxxxxxxxx] 
Sent: Tuesday, October 28, 2003 8:13 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: OWA with SSL Certificate


http://www.ISAserver.org

Now I'm getting the dreaded proxy chain loop, and it's all
correct.......waaaahhhhhhhhhhhhhh!!!

At least it's getting to the webserver now

S 


-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx] 
Sent: Tuesday, October 28, 2003 9:54 PM
To: Isa Weblist

http://www.ISAserver.org

Hi Steve,

Check out the ISA Server 2000 Exchange 2000/2003 Deployment Kit!

(I had to say that for Greg) :-)

What I would do in this situaiton is:

1. Use the same FQDN in the redirect in the Web Publishing Rule as that
included in the Destinantion Set 2. Create a HOSTS file entry on the ISA
Server firewall that includes that FQDN and map it to the internal
address of the Web site.

HTH,
Tom
www.isaserver.org/shinder
 

-----Original Message-----
From: Steve Moffat [mailto:steve@xxxxxxxxxxxxxxxxxxxxxxxxxx]
Sent: Tuesday, October 28, 2003 7:45 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: OWA with SSL Certificate

http://www.ISAserver.org

Hi Tom

I had a look at Qusai's setup and did the cert config and importing,
(not the first I may add, tho' it is the first that has given this
error)

I have imported the cert into the trusted autaurity stores on the
webserver and the Isa server, and also imported them into the computer
store also.

1 thing with qusai's setup, he publishes a public dns server on the ISA
server and all the ip addresses for his domain point to the external
address.

This is how it has to be done at the moment according to Qusai, if
however, I put the ip address of his internal dns server in the dns
settings would that stop any looping etc?

Steve


-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx]
Sent: Tuesday, October 28, 2003 9:27 PM
To: Isa Weblist

http://www.ISAserver.org

Hi Qusai,

Go to www.isaserver.org and do a search for "500" in the Search box
there.

HTH,
Tom
www.isaserver.org/shinder
 

-----Original Message-----
From: Qusai Ali AL Haddad [mailto:qusai@xxxxxxxxxxxxxx]
Sent: Wednesday, October 29, 2003 1:10 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] OWA with SSL Certificate

http://www.ISAserver.org

Dear All
i have installed OWA with SSL certificate https://webmail.hostname.com
the certificate appear when i accept the certificate it gives me this
error msg 

500 Internal Server Error - The certificate chain was issued by an
authority that is not trusted. (-2146893019) Internet Security and
Acceleration Server

I have internal DNS on exchnage server
and External DNS in ISA Server 

any help 


regards to all


Qusai A. Al Haddad

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')



------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
steve@xxxxxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')



This E-Mail is confidential. It is not intended to be read, copied,
disclosed or used by any person other than the recipient named above. 


Unauthorised use, disclosure, or copying is strictly prohibited and may
be unlawful. Optimum IT Solutions disclaims any liability for any action
taken in connection of this E-Mail. The comments or statements expressed
in this E-Mail are not necessarily those of Optimum IT Solutions or its
subsidiaries or affiliates.

administrator@xxxxxxxxxxxxxxxxxxxxxxxxxx 



------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')



------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
steve@xxxxxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')



------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')


Other related posts: