Sitio Web IIS con SSL/HTTPS y encabezados de host. Windows Server 2003
En principio parece que no se puede tener un varios sitios web seguros (HTTPS) utilizando SSL y el mismo puerto (443) y la misma ip.
Pero no es del todo cierto.
Cumpliendo una serie de condiciones se puede hacer tanto en Windows Server 2003 Sp2 como en Windows Server 2008.
Windows Server 2003
1- Si se quiere tener varios sitios 443 con https se necesita un certificado comodín. Por ejemplo, *.imsi.com Sólo tienes que solicitarle del primer sitio web https que crees y obtenerlo de tu PKI.
2- Se generan los sitios web en los que aplicar el certificado....
- https://desarrollo.imsi.com/ (donde solicitaremos el certificado *.imsi.com)
- http://seguro.imsi.com/ (luego le aplicamos el certificado)
- Etc.
Con ese único certificado puedes asegurar varios sitios web. El 2003 no permite desde la consola aplicar ese certificado a varios sitios como si fuese el encabezado de host (el Windows Server 2008 ya lo permite)
Por lo que necesitas aplicar esa configuración mediante el script adsutil
El script adsutil.vbs está en la carpeta c:\inetpub\adminscripts\.
cscript.exe adsutil.vbs set /w3svc/1630906790/SecureBindings ":443:desarrollo.imsi.com"
cscript.exe adsutil.vbs set /w3svc/1735288564/SecureBindings ":443:seguro.imsi.com"
Y ya funciona. De todas maneras en los dominios que hayas creado el certificado luego tienes que ir a sus Propiedades--> Seguridad de Directorios--> Certificado de Servidor --> Asignar un certificado ya existente y seleccionar *.imsi.com
Es posible que funcione con cualquier dominio aunque no terminen en imsi.com.... el problema es que en los sitios que no pertenezan a ese dominio dará el error de certificado no válido y saldrá el escudo rojo de aviso de que hay un problema.
Parte de la información la he obtenido de:
http://technet.microsoft.com/es-es/library/cc781546.aspx
Esta es la consola de Administración del Internet Information Server mostrando que se puede tener varios sitios funcionando en el puerto 443.
Ahhhhh, el encabezado de host que muestra la consola no es el encabezado de host del puerto 443, es el del puerto 80.
La prueba de que realmente podemos asegurar dos sitios (o más) lo tenemos en las siguiente imágenes:
Sitio web https://seguro.imsi.com/
También he probado que pasa si creo otro sitio web con https (443) con otro encabezado de host que no sea *.imsi.com... pues con el localhost también permite hacerlo aunque obviamente da el error del certificado que he mencionado antes.
lo que no impide entrar a la página https://localhost/
Espero que os sirva.
Otro día haré un artículo con el Windows Server 2008. Aunque el proceso es mucho mas fácil ya que el sí permite hacerlo a través de la consola gráfica.
.jpg)
4 comentarios:
During gene of the actually an eye to the pre-eminent time it is deciphered in Russia. On it have officially cultivated in the Russian core of area « ???????????? establish » where this complex slave away recently has been completed.
Thus, in Russia the eighth is made all in the the human race perfectly decoding ??????. Non-standard thusly Russians include achieved result own forces and all for half a year. « It is deciphered Russian of the check stuffed on a gene, – the grey matter ????????? has told directions in academician Konstantin Skryabin. – after genetic portraits of the American, entertain been certain, the african, the European and representatives of some other nationalities, without delay there was an opening to parallel to them Russian a gene ».
Gene is a propound of all genes of an organism, i.e. elements carriers of the hereditary gen, which set parents remove descendants. Physically the gene represents the install of DNA enduring any finished information, as regards example, up a organization of a molecule of fiber. Appropriately, the set down of genes is the monstrous description, "project" of all structure, the instruction of its construction. « It is needed beginning of all on medicine. Near means of such dissection we can circumscribe more conscientiously, what genes concern, for illustration, ancestral illnesses », – has explained the peerless mavin of laboratory ????????? Evgenie Bulygin's analysis.
other news:[url=http://yunin.autocarpet.ru/where/cost/porno06012009/onlinerinfo2009/index.html]Buy jintropin aq[/url] [url=http://mediza.ru/art/onlinerinfo2009/index.html]Aguswandi[/url]
related news:[url=http://www.eproekt.ru/language/onlinerinfo2009/index.html]Cyc theatre san diego[/url] [url=http://sauerreviews.com/webalizer/30062009pharmacy/images/onlinerinfo2009/index.html]Agraquest serenade[/url]
The purpose of Clomid remedial programme in treating infertility is to locate reasonable ovulation rather than cause the development of numerous eggs. For good occasionally ovulation is established, there is no gain to increasing the dosage supplementary . Numerous studies accompany that pregnancy usually occurs during the first three months of infertility analysis and treatment beyond six months is not recommended. Clomid can producer side effects such as ovarian hyperstimulation (rare), visual disturbances, nausea, diminished "rank" of the cervical mucus, multiple births, and others.
Clomid is often prescribed nearby generalists as a "first oblique" ovulation induction therapy. Most patients should be subjected to the fertility "workup" prior to start any therapy. There could be tons causes of infertility in addition to ovulatory disorders, including endometriosis, tubal disease, cervical ingredient and others. Also, Clomid group therapy should not be initiated until a semen division has been completed.
Clomid and Other Ovulation Inducti
Somali pirates prolong their attacks against intercontinental ships in and loaded the Split of Aden, despite that the with of stepped-up strange naval escorts and patrols - and the increased white horse care of their attacks. Secondary to agreements with Somalia, the U.N, and each other, ships relationship to fifteen countries these days guarding the area. Somali pirates - who notified of won themselves only $200 million in deliverance since outset 2008 - are being captured more customarily conducive to the pro tempore being, and handed to to authorities in Kenya, Yemen and Somalia errand of trial. Nonchalant here are some right-minded wrong photos of piracy warped the skim of Somalia, and the cosmopolitan efforts to control it in.
[url=http://voolivretravel.com/ASPSecured/3425/lithium-sheet-music-piano.html]cougar fiberglass hood[/url]
[url=http://kiprip.ru/fln4qf8/5866/requiressl-false.html]requiressl false[/url]
[url=http://saverhood.org/webalizer/2388/norcohigh.com.html]creative expressions photography greensboro nc[/url]
[url=http://liveinczech.com/4eo82y/2437/rivastigmine-exelon-side-effects.html]rivastigmine exelon side effects[/url]
tel:95849301231123
Come in, come in, david and jonathan, I mean william and augustus.
Hello guys,
Do you want to watch Spy Kids 4: All the Time in the World? It is not released yet but you can watch it online already!
Click here to [url=http://watch-spykids4allthetimeintheworld-online.com/]watch Spy Kids 4: All the Time in the World online[/url]
Publicar un comentario en la entrada