https iexplorer7 KO!

I am looking for help

I'm working with JES and I have begun asking at that forum:

http://forum.java.sun.com/thread.jspa?threadID=5191057&tstart=0

Perhaps you may help me, my issue:

I use the versions:

Sun ONE Web Server 6.1SP5 B06/23/2005 18:00

Sun ONE Web Server 6.1SP3 Reverse Proxy Plugin B09/09/2004 13:42

I've a problem with newest versions of IE when I set up the system in SSL. Sorry, I cannot try with old versions.

Sun Java(TM) Enterprise System 2005Q4

FrontEnd:

UWC(443)+ME(81)+MMP

BackEnd:

ME-stored(80)+Calendar

AM(80)+LDAP

If I run this without SSL all works fine using any browser, but SSL brakes the connection with IE7. No problem with Firefox and Opera.

I have seen that ie7 "falls" with virtual server! (ip based, of course)

When I set up security ssl to default VH, IE7 works fine. Not in another case.

No problem when service started

[LS ls3] https://192.168.16.44:443 ready to accept requests

[LS ls2] https://10.10.17.58:443 ready to accept requests

[LS ls1] http://web01:80 ready to accept requests

have I forgotten some configuration? is it a bug? any idea?

[1316 byte] By [dptosoportea] at [2007-11-27 9:56:24]
# 1
Can you elaborate on what "brakes the connection" and "falls with virtual server" means? What do you type in IE, what do you see in IE, and what is written to the server's log files?
elvinga at 2007-7-13 0:26:31 > top of Java-index,Web & Directory Servers,Web Servers...
# 2

My browser is configured in Spanish language, I don't know exact messages in English... sorry.

* https://10.10.17.58/

Exist a problem with security cert. You have two options, 1.- Close this window, 2.- Go to this Web (no recommended).

* I click on "Go to this page".

Internet Explorer can not show the web page.

You are not connected to Internet or dns problem or web site problem...

* Nothing has written in the server's log files.

That's all!!! :-/

Also I have used Fiddler with "Capture HTTPS CONNECTs" checked and repeat:

* https://10.10.17.58/

Fiddler:The remote server has presented a certificate that did not validate.

RemoteCertificateChainErrors

Ignore errors and proceed anyway?

I:Yes

IE: Exist a problem with security cert. You have two options, 1.- Close this window, 2.- Go to this Web (no recommended).

* Go to this page

Fiddler:The remote server has presented a certificate that did not validate.

RemoteCertificateChainErrors

Ignore errors and proceed anyway?

I:Yes (It repeats several times, I Always answer yes)

* I can see Messenger Express login page, IE shows red secuity alert

* No errors logs, only normal access log entries

I believe that there is a problem with the cert negotiation...

I want to remember than Firefox and Opera does not have problem with ssl and IE7 without https works fine too

dptosoportea at 2007-7-13 0:26:31 > top of Java-index,Web & Directory Servers,Web Servers...
# 3
What subject was the certificate issued to? Certificates are typically issued to hostnames, not IP addresses. Unless the certificate was issued to 10.10.17.58, accessing http://10.10.17.58 will correctly cause Internet Explorer 7.0 to complain that the certificate belongs to another
elvinga at 2007-7-13 0:26:31 > top of Java-index,Web & Directory Servers,Web Servers...
# 4

Yes, I know it. Also I have tried it under the server name.

If I secure the default virtual server with the same cert then the applications uwc and mexpress work fine. The problems appears when I try to secure the virtual servers

I am using a certificate signed by myself but this is not a problem in another way.

Fiddler says "RemoteCertificateChainErrors". What does this mean?

dptosoportea at 2007-7-13 0:26:31 > top of Java-index,Web & Directory Servers,Web Servers...
# 5
Seems like MSIE does not trust the CA that issued your cert. Check the security settings for MSIE and see if there's an option for SSL that will allow MSIE to prompt you to trust the certificate despite not trusting the CA.
JoeMcCabea at 2007-7-13 0:26:31 > top of Java-index,Web & Directory Servers,Web Servers...
# 6
I have not found no suchlike option in ie7.I have tried to connect to another own-CA sites and works fine.I also have imported directly the CA to my browser but it does not work neither.more ideas?
dptosoportea at 2007-7-13 0:26:31 > top of Java-index,Web & Directory Servers,Web Servers...
# 7

FYI

My configuration is based in the following document:

Document ID: 67651

Title: How to create and set up SSL for IP address-based virtual servers in iWS 6

http://sunsolve.sun.com/search/document.do?assetkey=1-9-67651-1

If it runs on another browsers I do not understand what can happen with ie...

dptosoportea at 2007-7-13 0:26:31 > top of Java-index,Web & Directory Servers,Web Servers...
# 8
has nobody this configuration?exist another method to configure 2 virtual servers in ssl?do you think i can upgrade webserver to version 7?I don't understand why it works fine on Firefox and Opera but not on IE7I would appreciate any comment or idea
dptosoportea at 2007-7-13 0:26:32 > top of Java-index,Web & Directory Servers,Web Servers...