SSL Certificate problem

pramod.barthwal · Joined: 27 Feb 2008 Posts: 2

I want to install a SSL certificate on Exchange 2007 HUB server for
OWA access. I did generate the CSR with the external URL
(webmail.abc.com) only and installed this certificate. I get the
following certificate error:

"The name on the certificate is invalid or does not match the name of
the site"

Please let me know what all parameters needs to be put in the CSR
generation so that i can overcome this warning as it is annoying to
the users to see this everytime.

thanks
Pramod

Archived from group: microsoft>public>exchange>admin

RealDeal1 · Joined: 05 Aug 2007 Posts: 16

If I'm not mistaken, the Cert should go on your CAS server. Hub transport
can be combined with CAS. How are you accessing owa for testing? are you
using the ip address or FQDN?

wrote in message @41g2000hsc.googlegroups.com...
>I want to install a SSL certificate on Exchange 2007 HUB server for
> OWA access. I did generate the CSR with the external URL
> (webmail.abc.com) only and installed this certificate. I get the
> following certificate error:
>
> "The name on the certificate is invalid or does not match the name of
> the site"
>
> Please let me know what all parameters needs to be put in the CSR
> generation so that i can overcome this warning as it is annoying to
> the users to see this everytime.
>
> thanks
> Pramod

pramod.barthwal · Joined: 27 Feb 2008 Posts: 2

On Feb 27, 12:29 pm, wrote:
> If I'm not mistaken, the Cert should go on your CAS server. Hub transport
> can be combined with CAS. How are you accessing owa for testing? are you
> using the ip address or FQDN?
>
> wrote in message
>
> @41g2000hsc.googlegroups.com...
>
>
>
> >I want to install a SSL certificate on Exchange 2007 HUB server for
> > OWA access. I did generate the CSR with the external URL
> > (webmail.abc.com) only and installed this certificate. I get the
> > following certificate error:
>
> > "The name on the certificate is invalid or does not match the name of
> > the site"
>
> > Please let me know what all parameters needs to be put in the CSR
> > generation so that i can overcome this warning as it is annoying to
> > the users to see this everytime.
>
> > thanks
> > Pramod- Hide quoted text -
>
> - Show quoted text -

CAS and HUB roles are on the same server. We are using FQDN and for
external users an external URL.

Thanks,
Pramod

Oliver Moazzezi [MVP] · Joined: 02 Oct 2007 Posts: 583

What's the common name of the certificate and what's the URL?

Both must match.

Oliver

Andy David {MVP} · Joined: 05 Aug 2007 Posts: 591

On Wed, 27 Feb 2008 18:35:58 -0000, "Oliver Moazzezi [MVP]"
wrote:

>What's the common name of the certificate and what's the URL?
>
>Both must match.

Only if not using a subject alternative name or UCC cert.

>
>Oliver
>

New Certificate How do I either regenerate or extend the certificate generated by exchange 2007 when it was installed?

StartTLS certificate I have an event in my app log stating that my self signed certificates on my transport servers is going to expire soon. Do I have to recreate a self signed cert or can I clone the existing self-singed cert? Thanks for any help.

Self-signed certificate My selft signed cert is about to expire for StartTLS. If I clone the existing cert doing: -thumbprint XXXX | will I get a new time stamp on the new cert of one year? After running this command, do I just

Certificate install... To enable RPC over HTTP, do I install my certificate on the Rpc or RpcWithCert virtual directory or the Default web site?

SSL certificate question. Hello I have been trying to use our own SSL CA certificate without a 100% success with an Exchange 2007 server. Basically, using our own CA certificate, pretty much all services work with SSL except IMAP ; which terminates immediately the connection: serv