2

There is an IIS Webserver with different Sites (SSL Binding) because I can't configure IIS to listen on same Address and Port with different Certificates so I set the SSL Port direction in the firewall to another Port of the IIS Webserver IP.

Explanation: 

Client -> Firewall -> Webserver
Website1 -> WANIP1:443 -> LANIP1:443
Website2 -> WANIP2:443 -> LANIP1:444

So it is possible to encrypt different sites with different certificates on one IIS Webserver. The Problem is now the Browser Firefox (ver.24) if I surf to the Website1 the is a key in the line that show me the Connection is secure, on website2 there is no lock before the URL:

Website1 with the lock:

enter image description here

Website2 has no lock:

enter image description here

What is the problem? Nn Safari and IE there is no Problem, what is the difference for Firefox?

Update: I check with different Versions of Browsers. Firefox 3.6 shows the lock-symbol but the current release didn't show this lock-symbol. Is this a error in the current release or is this an error in all other browser? How can I check if the whole traffic is encrypted?

Improve this question
6
  • Did you test it with something such as this; also does website2 have any mixed content (http/https)?
    – l'L'l
    Nov 22, 2013 at 15:20
  • The result of your link is okay no Warnings or Errors. If I change from different Ports to Different IPs all works well. Its only if I use a different local port.
    – kockiren
    Nov 22, 2013 at 15:25
  • That makes sense about the IPs. If you have HTTP + HTTPS content on the server FF 23+ will reject it as 'secure'. You might want to check the applicationhost.config manually (if you haven't already) and modify the binding part there. Also make sure you've got SNI checked on.
    – l'L'l
    Nov 22, 2013 at 16:36
  • The Binding ist Set to Port 444 for website2
    – kockiren
    Nov 22, 2013 at 17:50
  • What happens if you change Website2 -> WANIP2:444 -> LANIP1:444 or set a rewrite from port 443 to port 444. If SNI is on it should've taken care of it properly.
    – l'L'l
    Nov 24, 2013 at 0:12

0

Reset to default

You must log in to answer this question.

Browse other questions tagged .