Announcement

Collapse
No announcement yet.

Exchange SSL Cert error with a twist

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Exchange SSL Cert error with a twist

    Hi guys,

    One of my sites is getting the SSL certificate error in their outlook 2007 mail clients. Exchange has been fully updated and has sp2. When this cert error happens, the way i fix it is i run fix my network wizard and then readd the SSL certificate into SBS through the wizard.

    This fixes it but then a few days later, it happens again. Any ideas?

    Cheers.

  • #2
    Re: Exchange SSL Cert error with a twist

    Is this a commercial cert or an internally issued one?

    What is the actual error?

    Can you confirm this is SBS or I wil move the thread to the Exchange 2007 forum
    Tom Jones
    MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
    PhD, MSc, FIAP, MIITT
    IT Trainer / Consultant
    Ossian Ltd
    Scotland

    ** Remember to give credit where credit is due and leave reputation points where appropriate **

    Comment


    • #3
      Re: Exchange SSL Cert error with a twist

      It is SBS, but wasnt sure whether to put it here for there.

      The certificate is a commercial one.

      And.. The error is:

      Comment


      • #4
        Re: Exchange SSL Cert error with a twist

        Have you confirmed the name they are using matches the certificate exactly?
        Since it is a site, they could be using:
        External domain name
        Internal server name (netbios or fqdn)
        Internal IP
        External IP
        but I presume the certificate doesnt carry all of those!
        Tom Jones
        MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
        PhD, MSc, FIAP, MIITT
        IT Trainer / Consultant
        Ossian Ltd
        Scotland

        ** Remember to give credit where credit is due and leave reputation points where appropriate **

        Comment


        • #5
          Re: Exchange SSL Cert error with a twist

          Originally posted by gerdy View Post
          It is SBS, but wasnt sure whether to put it here for there.

          The certificate is a commercial one.

          And.. The error is:
          Your getting that error because your using the incorrect name to access the site. Use the same name thats on the certificate and you wont get that error. The name will be listed under "subject" in the certificate.

          Comment


          • #6
            Re: Exchange SSL Cert error with a twist

            That's the problem though. All the details seem to be fine and it worked when you first import the certificate and then breaks down 2 or 3 days later. Then you have to reimport the certificate for it to work.

            Comment


            • #7
              Re: Exchange SSL Cert error with a twist

              Was it a single name or a UC certificate that was installed?
              If it was the former, it should have been the latter.
              If it was the latter, then I would be checking the name resolution is correct.

              SBS 2008 really likes to use the host name "remote.example.com" (where example.com is your public domain name). I have had nothing but problems when trying to use anything else, so have given up trying.
              If you want to use other names then those go in an UC certificate as additional names.

              Instinct says this is something SBS is doing to "correct" things and your certificate doesn't match what it wants.

              Simon.
              --
              Simon Butler
              Exchange MVP

              Blog: http://blog.sembee.co.uk/
              More Exchange Content: http://exchange.sembee.info/
              Exchange Resources List: http://exbpa.com/
              In the UK? Hire me: http://www.sembee.co.uk/

              Sembee is a registered trademark, used here with permission.

              Comment

              Working...
              X