SSL and IIS with Multiple Sites

[Vyper]

Hello, I have multiple sites hosted through my IIS and I recently installed a certificate to one of them for SSL connections. To begin, I receive two issues with my current configuration. The first, I only get "Page Not Found" or "No Input File" (for PHP) errors whenever I use HTTPS to connect to the site. With the certificate (if I don't require SSL) I can still load all pages fine. I believe that this could be due to the fact that I have an unassigned IP address for the host name, from what I have read in searches, but I am not completely sure. I should also note that there is our mail server which has it's appropriate certificate and that runs fine (although I did not set up that website, nor do I have access because the IIS server is shared).

The second issue is with the certificate that is displayed when I try to use HTTPS. The certificate assigned in the Directory Security has the common name as the site, but when I access through HTTPS, I'm presented with a server that is apparently issued to the Server rather than issued to my site. I have not been able to find any information on this topic as of this posting.

I am running everything on Windows Server 2003 with IIS 6.0. I also have PHP and MySQL linked to my site (which are not present on any other sites in the same IIS Server).

If any other technical information is required, I will be able to reply about that to help resolve this problem. Thank you in advance.

[Vyper]

... but when I access through HTTPS, I'm presented with a server that is apparently issued to the Server rather than issued to my site...

That should be presented with a certificate that has the same common name as the Server rather than the one in my directory security.

I have done a little more research, and I have found that my PHP isn't enabled for HTTPS, so that may be a resolution to the issue with PHP pages not loading (although it doesn't quite answer why HTML pages aren't loading and there's still the lingering problem on the server certificate). I found a checklist produced by Thawte on SSL and IIS troubleshooting and I have tried most of them to no avail. I still have to try the SSL Diagnostics tool by Microsoft that was recommended which I will do when I get access to the server in a few hours.

Also, I wanted to note (because I'm not sure if I did so explicitly earlier) that in my Website Properties, the IP address is set to "(All Unassigned)" as I'm not sure if that makes a difference. I have chosen to use an arbitrary port (port 9359) which is enabled on my router and firewall, although that did not produce any results either. I'm not sure if I'm getting the server certificate with HTTPS because of an overriding configuration inherited from the server configuration or because I haven't configured SSL properly.

I will be upgrading my PHP to the latest release (migrating from 4.3.9 to 5.2.3) and enabling SSL for it at the same time and I will see if that helps in any way and provide an update if I can give more information at that time. I have assured that I have the private key to the certificate and quite a few other basic troubleshooting steps I've found. I'll take a deeper look into the server setup regarding it's certificate and see if it's affecting my site using it's certificate. Until then, any more information that might be useful is appreciated. Thank you.

[kenobewan]

My advice is to contact the IIS admin about the page not found. If you like I can have the post moved to php where there may be more experience with this issue.

[Vyper]

My advice is to contact the IIS admin about the page not found. If you like I can have the post moved to php where there may be more experience with this issue.

I would appreciate that. Thank you for your efforts. My father is the admin, and I have contacted him prior to this posting, but generally he will agree that I have more knowledge about this particular area than he does. I think I have an IIS book lying around that I can go through as well. Thank you again.

[Vyper]

Okay, I have done a little bit more research into the two problems I am experiencing.

As for PHP not loading files, I have checked my phpinfo and I do not see HTTPS listed as a registered stream. So, I'm thinking that PHP isn't supporting SSL at the moment. I will enable that once I've migrated.

Now, for the IIS problem. I believe that my issue is with my lack of supplying a specific IP to the Website Property. I believe it's due to the fact that I'm using host headers, and with SSL, the domain is encrypted. I believe this is the reason I'm not getting what I expect because it's returning the server instead of my domain because it can't get a host header. This also returns my servers company website as the main page because it's going to the server. This is certainly the reason for my errors and explains the awkward certificate use. So, my goal now is to figure out how to keep host-headers while still using SSL. I believe http://support.microsoft.com/kb/187504 has the information pertaining to it, but I'm just looking for some confirmation of this working. The only problem is that it says to use wildcard server certificates, however my sites are domain1.com, domain2.com, domain3.com, etc. and I can't use a *.com server certificate. I'm guessing that the only other option is to set up a different IP address for the site but I'm not sure if I have extra IP addresses floating around. I'll find out more about it. If anyone has suggestions or ideas that might help, let me know. Thank you.

[Vyper]

Just wanted to send this message saying that I figured out what was wrong with it and everything seems to be working as expected now. Thanks to whomever attempted to help.

[bomb27]

Can you let me know how you figued this out?
I have the SAME situation, a bought and installed an SSL for one site on my server which hosts many sites.
I installed the cert, but it's not working--and I do not have multiple IP addresses I can assign to this one virtual website.

Can you tell me how I can fix it? The MSN article says that server 2003 fixes the issue, but I have server 2000...

Thanks in advance!