Skip to Content
author's profile photo
Former Member

Having problem with SSL and ITS

I am using ITS 6.20 on windows, in a load balanced scenario. I am using IIS 6. For some reason I cant get SSL to work?

All i did was assign a port on the ITS wgate website for SSL. Then I added a url to the wgate registry config file. Still I cant even get the website to come up????

Thanks

Add comment
10|10000 characters needed characters exceeded

  • Follow
  • Get RSS Feed

3 Answers

  • Oct 06, 2005 at 04:33 PM

    Hello Jeremy,

    have you only configured the ITS? I think you should get SSL running on the IIS and then use this IIS to run the ITS inside.

    Regards

    Gregor

    Add comment
    10|10000 characters needed characters exceeded

  • author's profile photo
    Former Member
    Oct 06, 2005 at 09:06 PM

    Hello Jeremy,

    Computer management

    > services and applications

    > IIS

    > <virtual webserver>

    > properties

    > <tab> web site

    > SSL port

    Documentation at MS

    http://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/d70e2bb7-9693-485e-a5e1-7196d7e655b3.mspx

    Check the basic functionality of the https IIS first before you dock wgate to it.

    Regards,

    Fekke

    Add comment
    10|10000 characters needed characters exceeded

  • author's profile photo
    Former Member
    Oct 06, 2005 at 09:43 PM

    I got IIS up and I think I got it working. I want to know why that wgate-config url is such a POS! Either i am missing something or it adds the url and then after some time doesnt keep the entry in the itsregistry.xml

    I wound up manually adding it to the file. I know its not recommended, but I wonder why there is a section in the OSS note on how to do this???????

    Add comment
    10|10000 characters needed characters exceeded

    • Former Member

      Check if ItsRegistryWGATE.xml is updated!

      If not you are running with your changes in memory only.

      Your webserver runs probably under IUSR_.. access rights.

      Make ItsRegistryWGATE.xml writable for Everyone for the time being configuring.

      Repeat your wgate-config actions >> "activate" should update the ItsRegistryWGATE.xml !

      Else: the manuel way:

      You probably have an URL saying:

      - <key name="Url1">

      - <key name="Values">

      <value name="Protocol" type="text" />

      <value name="Host" type="text">_default_</value>

      <value name="Port" type="text">1080</value>

      <value name="ScriptPath" type="text">/scripts/wgate</value>

      <value name="InstanceName" type="text">IT1</value>

      <value name="Available" type="text">yes</value>

      <value name="RequireSSL" type="text">no</value>

      </key>

      <key name="Headers" />

      </key>

      Copy it, rename the new structure to "Url2"

      Change the:

      <value name="Protocol" type="text" />

      <value name="Host" type="text">_default_</value>

      <value name="Port" type="text">1080</value>

      accordingly e.g.

      <value name="Protocol" type="text">https</value>

      <value name="Host" type="text">_default_</value>

      <value name="Port" type="text">443</value>

      Protocol : "https" as wanted

      Host : "_default_" catches all; host, full domain, IP, etc

      Port : 443 as wanted

      Save the file and restart your webserver (ALSO restart the IIS MANAGER service!)

      Regards,

      Fekke