I have configured a Windows 2003 server to allow SSL access from the Internet, particularly to enable so called Outlook Web Access, that is browse Exchange Server data from the Internet.
Following steps from this site, I have achieved the goal creating a self issued certificate with built in W2K3 Certification Authority, FOLLOWING THE ADVICE to use THE SAME cname as the URL used to access the server from the Internet, that is the cname has been set to 'mydomain.com/exchange' because this is the URL used to access Exchange Server data from the Internet.
Users are allowed to connect however they're facing the tedious untrusted certificate error. I have read a lot about this problem. It looks like this happens when: - the cname and the URL are not the same - the certificate has been issued by an untrusted certification authorithy
To bypass this problem I have tried to force to workstations accessing the website to accept the certificate although not being issued from a well known certification authorithy, but the problem is still there.
What can i try?
Although a warning is issued, navigation is allowed. These are the warnings I get:
The site's security certificate is not trusted You attempted to reach mydomain.com, but the server presented a certificate issued by an entity that is not trusted by your computer's operating system. This may mean that the server has generated its own security credentials, which Google Chrome cannot rely on for identity information, or an attacker may be trying to intercept your communications. (Proceed Anyway)
Internet Explorer 9:
*There is a problem with this website's security certificate The security certificate presented by this website was not issued by a trusted certificate authority.
Security certificate problems may indicate an attempt to fool you or intercept any data you send to the server. * (Continue to this website (not recommended). )
The server's certificate chain is incomplete, and the signers are note registered. Accept? Certificate errors: The certificate for "mydomain.com/exchange/" is signed by the unknown Certificate Authority "WIN2003DC". It is not possible to verify that this is a valid certificate"