Quantcast
Channel: All Forums
Viewing all 27852 articles
Browse latest View live

PHP 5.3.28 not available in Web Platform Installer 5.0

$
0
0

Hello,
how can I install PHP 5.2.8 knowing that it does not appear in the Web Platform Installer version 5.0
for Windows Server 2008 R2 x64


two of three sites throw 500 internal server errors with no code after them

$
0
0

Hi all,

I've got three sites; two running DNN, and the other running ProjectNami with PHP 5.6. One of the sites,http://cambridgeport90.net, loads and is view-able (coming along great, actually). The others,http://stormlighttech.org, powered by DNN, andhttp://defendersofcambridge.org, powered by ProjectNami, don't.

The following is a log from stormlight ... I have the custom error element of wweb.config set to off (yields nothing useful though, still "500 internal server error. There is a problem with the resource you are looking for and it cannot be displayed"), but the key is, I believe in the following log fragment:

From the log: 2016-07-17 15:20:49 10.0.0.11 GET /Default.aspx tabid=59&error=An+unexpected+error+has+occurred&content=0 80 - 104.193.88.244 Mozilla/5.0+(Windows+NT+5.1;+rv:6.0.2)+Gecko/20100101+Firefox/6.0.2 - 500 0 0 218

What's getting me ... don't error 500's normally have some sort of code after them in order to tell you what's wrong or what to go fix? ( think the "unexpected error has occurred" line, which doesn't look very IIS log-like to me, is trying to tell me something). Just to let you guys know, this site worked fine at one time, I reinstalled the actual web site files because some  module or other I had installed kept breaking things, I had accidentally tried to install into a database with stuff in it, and so on, so I figured it needed to be refreshed.. I can't even load the absolute URL ... stormlighttech.org/install/install.aspx; similar error.

Onto the PHP site:

I installed PHP via the Web Platform installer as recommended. I can see all of the settings ... all of the extensions and what not are there, including all of the ones for the SQL server driver. when I take a look at defendersofcambridge.org, I get: 500 internal server error. There is a problem with the resource you are looking for, and it cannot be displayed.Throws a 404 on the local server ... Do I have to do anything after PHP installs to get it to work? (I think I somehow ended up with both versions  5 and 7 in there when I  was messing with chocolatey, but per PHP manager, everything seems to indicate version 5.something.) Logs look similar to those above ... except no calls ever to index.php, wp-install.php, ever. As if the server isn't actually serving the page. Sort of explains the 404 on the inside, doesn't it? Thankfully that site's not as important as the first. Suggestions would be awesome; this is driving me nuts.

Reverse proxy, IIS URL Rewrite, URL Authentication Windows vs Basic

$
0
0

Hi IIS Forums,

I've got a java back-end application that I'm hoping to wrap some security around with IIS, as well as serve web content with IIS. All components are on the same server. The application will then be fire-walled off. 2008 R2, IIS 7.5

Everything works when the Default Web Site is set to basic authentication only (albeit with a sign on prompt). When set to Windows authentication, no sign on is required and the HTML/JS pages are served correctly authenticated, but the routed REST application starts to break initially throwing 502.3 bad gateway, then 400. 

Some articles showed issues around double hops - this doesn't quite make sense to me as I would assume basic is also a double hop and that works. When I change my AD role config to fake roles, IIS stops routing the front end and proxied back end as expected.

I have also avoided kerberos, as generally I'm trying to avoid it as well as creating an apache web proxy to handle auth as I believe IIS is a better offering in terms of a web front end server. Simplicity is also reflected in the choice is spring boot to avoid configuring Tomcat.

Feels like I'm missing something, it would be a shame if I couldn't get it working with SSO.

URL rewrite installed, Web URL auth installed, arr installed,

Default Web Site Configuration
<?xml version="1.0" encoding="UTF-8"?>
<configuration>
<system.webServer>
<rewrite>
<rules>
<rule name="route special application to port 8080" stopProcessing="true">
<match url="MyApplicationRest/(.*)" />
<action type="Rewrite" url="http://localhost:8080/{R:1}" />
</rule>
</rules>
</rewrite>
<security>
<authorization>
<remove users="*" roles="" verbs="" />
</authorization>
</security>
</system.webServer>
<location path="MyApplication">
<system.webServer>
<security>
<authorization>
<remove users="*" roles="" verbs="" />
<add accessType="Deny" users="?" />
<add accessType="Allow" roles="myDomain\myBusiness role" />
</authorization>
</security>
</system.webServer>
</location>
<location path="MyApplicationRest">
<system.webServer>
<security>
<authorization>
<remove users="*" roles="" verbs="" />
<add accessType="Deny" users="?" />
<add accessType="Allow" roles="myDomain\myBusiness role" />
</authorization>
</security>
</system.webServer>
</location>
</configuration>

Front end
>>Default Web Site port 80, IIS Web App was created containing HTML, JS, angular calling the spring boot back end (http://localhost:80/MyApplication)

Back end
>>Spring boot application exposing port 8080, no auth (http://localhost:8080/MyApplicationRest/some/rest/path )

Retrieving the COM class factory for component with CLSID {CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA} failed due to the following error: 800703fa.

$
0
0

This is error that I'm getting while connecting to a server.  I have seen similar kind of error in sharepoint service.  But  I'm not sure it is one and same.  Can anybody confirm me that?

IIS7 FTP Publishing issue

$
0
0

I have setup FTP Publishing on my IIS7 website and I set it up for SFTP.

I have an SSL cert installed but when I try to connect via SFTP I get an error "The server rejected SFTP connection, but it listens for FTP connections."

If I try connecting using FTP, it says "Policy requires SSL"

Any ideas as to what to do here?

FILELIST_CACHE / FILEMAP_INFO errors even after filecache is disabled.

$
0
0

We found we were getting the following errors on production:

PHP Fatal error:  WINCACHE: lock_readlock: acquired abandoned mutex Global\FILELIST_CACHE_5.6_1.3.7.4_1_0_608445_X. Something bad happend in another process! in C:\Program Files\..

and PHP Fatal error:  WINCACHE: lock_writelock: acquired abandoned mutex Global\FILEMAP_INFO_HRWLOCK_5.6_1.3.7.4_1_0_608445_X. Something bad happend in another process! in Unknown on line 0”

The confusing thing is these errors still occur when we disable filecaching.  We have therefore removed wincache from production but I would like to resolve these issues (with or without filecache) so I can re-instate wincache on production. 

Any ideas?

Here are are Winchache settings: 

wincache.ocenabled =1

wincache.fcenabled = 0

wincache.ucenabled = 1

wincache.fcachesize = 255

wincache.maxfilesize = 2048

wincache.ocachesize = 150

wincache.filecount = 8000

wincache.ttlmax = 2000

wincache.ucachesize = 85

wincache.scachesize = 128

wincache.srwlocks = 0

IIS SMTP service

$
0
0

Installed the SMTP service and IIS 6 Management tools on a 2012R2 server. For the relaying part we've setup a subscription with Mailgun.
A program that runs on the same server will send email to the IIS SMTP server which should relay the mail to the Mailgun SMTP relay service. 

One of the problems is a user can enter in any domain it wants, for example it should be @contoso.com, but if the user enters in @wrongdomain.com it will also send the email to the IIS SMTP server. This means the IIS SMTP server has to filter out/drop @wrongdomain and only allow emails with the @contoso.com domain to pass-through and being forwarded to mailgun. To it seems this should be possible with Remote Domains, right?

For this to work:
-Added a remote domain named contoso.com
-Under the properties of the remote domain i've enabled: Allow incoming mail to be relayed to this domain
-Outbound security --> basic authentication with the required credentials
-Forward all mail to smart host: smtp.mailgun.org

After that I've started Wireshark and did a capture, instead of using the specified smart host it performs a query against a domain controller for the recipients mailserver and directly sends out the email to the internet instead of using the mailgun service.... 

If i set the credentials at SMTP virtual server level it works without any issues, but the user will be able to send out an email with the wrong domain. It just forwards the email without looking at the domain.

To my knowledge the above should be possible (remote domain and specifying the smart host for the remote domain)

IIS slow in loading Report Viewer

$
0
0

(I had originally posted this to the SQL Server forum, but was suggested to post this here as it seems IIS-related)

We are running IIS & SSRS on the same production server and have two types of reports - one running through Report Viewer, connecting to SSRS (remote mode) and the other calling the SSRS web service to generate PDFs.

For both of the report types, it becomes very slow when loading the page, taking upwards of 20 seconds. It is most evident during periods of heavy server load and the performance seems to decay the longer the application pool is not recycled. The slowness will go away after recycling the application pool in IIS but comes back after a while (the application pool is set to recycle daily at 3am).

I have checked the execution log of SSRS - for all the reports the time for data retrieval + processing + rendering will take no more than 2 seconds and the http logs of SSRS indicate that there is no request from IIS when the page becomes unresponsive - once the request does reach it loads very quickly. The reports when run through the report manager are very fast also.

It does not seem like SSRS is the culprit here and seems like something in IIS is causing it.

Has anyone else encountered a similar problem or can point me in the right direction for diagnosing?

Many thanks.


URL Rewrite Error Upon Install

$
0
0

Hello,

I am receiving an error 2503 and 2502 when attempting to install URL Rewrite 2.0 on my server with IIS 8.5. Has anyone experienced this issue? My main goal is to get rid of the server header that is showing my IIS version.

Get-WebRequest - The method or operation is not implemented

$
0
0

When I run this command I get the following error. Is it not ready yet for use?

C:\Windows\system32> Get-WebRequest
Get-WebRequest : The method or operation is not implemented.
At line:1 char:1+ Get-WebRequest+ ~~~~~~~~~~~~~~+ CategoryInfo          : NotSpecified: (:) [Get-WebRequest], NotImplementedException+ FullyQualifiedErrorId : System.NotImplementedException,Microsoft.IIs.PowerShell.Provider.GetWebRequestCommand



Getting 404-access is denied page not found error after URl rewrite process.

$
0
0

Hello All,

I have used the URL rewrite feature for site level. I have almost tried by creating blank rules,User_Friendly and rewrite map but every time i am getting 404- access is denied error.

can you please suggest.

thanks,

Shiv

IIS7 bindings not working and display default website

$
0
0

Hi,

I have a strange behaviour on one of our IIS7 server.

Here is the configuration :

- 2 IIS7 on Win 2008r2 with shared configuration, load-balanced on a public IP through a Cisco CSS

- 2 websites on these servers :

  • one is the default website (with no bindings excepted the default ones)
  • one is hosting an internal sapplication where we have hundreds of hosts bindings.

For most of the hosts we are adding to the internalapplication, we don't have any problem : we manually add a new host on the first server (through the IIS7 management console), it is added on the second one and both servers are working fine.

But from time to time, the binding is not working on the second server : when we call the new host in  browser (or curl), the page displayed is the default site instead of the application site.

In this case :

- the host is working correctly on the first server (ie display the correct page instead of the one of the default website),

- the host is present on the bindings of the second server

- the DNS are corrects (even by specifying the private IP of the second server in my host file, for example)

- rebooting the server does nothing.

- trying to remove then add again the binding from the second server does nothing (still arriving on the default web site).

- the log files (on event manager) don't show any errors.

Do you have any idea of how to solve this annoying problem ?

Tank you for your help,

Fred

Removing Server Header from IIS Website with Classis App Pool

$
0
0

Hello,

I have successfully been able to remove the server header from an IIS website that has an integrated app pool, but when the app pool is classic I can't remove the server header. I am using a module that I am referencing in the web.config file.

Joomla Sites Crashing on IIS

$
0
0

Hi. I'm having problems with a Joomla website (and its staging site) crashing periodically on IIS 6.2 on Win 2012 R2. The site is using a Rocket Theme template and is heavy in jQuery effects on the main page. I'm getting Application Pool errors throughout the day, i.e.

A worker process with process id of '4524' serving application pool '.NET v4.5' was shutdown due to inactivity.  Application Pool timeout configuration was set to 20 minutes.  A new worker process will be started when needed.

The site shuts down completely every once in a while ... I can't tell what caused it from the IIS logs and there is activity in the other pages while the site is down. I'm waiting for the next crash to see if only the front page is not working.

I modified the Aspnet.config file which decreased the number of crashes:

<!--<legacyUnhandledExceptionPolicy enabled="false" />-->
<legacyUnhandledExceptionPolicy enabled="true" />

Can many jQuery plugins cause the Application Pool to fail and freeze the web site? How do I get more information on the process ID's that are failing on the server?

Thanks.

IIS access without admin

$
0
0

Hi 

I need to allow a standard username (not admin) access to IIS and application pools . Can I do this without issuing admin rights on that account . I have giving access in IIS , server is on a dmz and not a domain so its local ad. 


$metadata 404 (Not Found) when hosting SAPUI5 app that connects to WCF data service

$
0
0

I have been developing SAPUI5 app that connects to WCF data service written in C# and there was no problem in the development process till i started to host the SAPUI5 app on my local IIS i started to get the following error in chrome developer tools$metadata 404 (Not Found) whenever i tried to connect to the service  Error

While in eclipse the code runs with no error No error

and hosted it on my local IIS and things were more than perfect then i developed a client app with SAPUI5 framework and again it was so smooth with zero errors until i hosted my client app on the local IIS i started to get the following error $metadata 404 (Not Found)

Server Error in '/' Application.


The resource cannot be found.

Description: HTTP 404. The resource you are looking for (or one of its dependencies) could have been removed, had its name changed, or is temporarily unavailable.  Please review the following URL and make sure that it is spelled correctly. 

Requested URL: /proxy/http/mikmo.mylocalhost.com/MIKMOWCFDataService.svc/$metadata


Version Information: Microsoft .NET Framework Version:4.0.30319; ASP.NET Version:4.6.1073.0

While developing i didnt get that error and i was developing the client app with Eclipse that uses Apache tomcat to run the SAPUI5 app

Any help would be appreciated 

Thanks in advance 

IIS Web Application can't be accessed remotely

$
0
0

I have created a web application in Asp.Net . I deployed it on an IIS Server and the web app works fine on my machine but when i try to access it on another computer it dosen't work.Internal Server Error occurred is the message. Do i need to convert this web application as website ? Is there any way to make a web application deployed on IIS 8 to be accessible on another machine?

Application Pool Identity: Network Service vs Local System

$
0
0

On Windows 7 Professional IIS, I have a classic ASP webpage calling a DLL file.

This DLL creates a batch file successfully and then tries to run the batch file that was just created.

The batch file runs successfully if the Application Pool Identity is set to "Local System",
But fails if the Application Pool Identity is set to "Network Service".

I gave full permissions to "Network Service" to all components I think are involved, but still fails running.

I understand "Local System" is a security loophole, but not sure what to do to get this working.

 

PHP 5.5.38 for IIS Downloaded file failed signature verification

$
0
0

Hello every one

for the past 3 days I have been getting this error: 

Downloaded file failed signature verification and may have been tampered with

I'm using microsoft web platform installer.

I have formatted my laptop 2 times now, so this isn't a caching issue.

Here is my log file:

DownloadManager Warning: 0 : product.SelectedInstaller == null for: VC12Redist

DownloadManager Information: 0 : Executing elevated install

DownloadManager Information: 0 : Using cached file at C:\Users\Khodor\AppData\Local\Microsoft\Web Platform Installer\installers\WordPress\04dc96205ae4286f6b63420e01b0e03f0bad9ec9\wordpress-4.6.1-IIS.zip instead of downloading from https://github.com/Atomthin/WordPress_Windows_package/blob/master/wordpress-4.6.1-IIS.zip?raw=true

DownloadManager Information: 0 : Starting install sequence

DownloadManager Information: 0 : Downloading file 'http://sourceforge.net/projects/phpinstallermsi/files/zip/php-5.5.38-nts-Win32-VC11-x86.zip/download' to: C:\Users\Khodor\AppData\Local\Temp\tmp2CA3.tmp

DownloadManager Information: 0 : http://sourceforge.net/projects/phpinstallermsi/files/zip/php-5.5.38-nts-Win32-VC11-x86.zip/download responded with 301

DownloadManager Information: 0 : Response headers:

HTTP/1.1 301 Moved Permanently

Location: https://sourceforge.net/projects/phpinstallermsi/files/zip/php-5.5.38-nts-Win32-VC11-x86.zip/download

Content-Type: text/html

Server: nginx

Date: Sat, 22 Oct 2016 07:53:38 GMT

Content-Length: 178

Connection: close

DownloadManager Information: 0 : https://sourceforge.net/projects/phpinstallermsi/files/zip/php-5.5.38-nts-Win32-VC11-x86.zip/download responded with 302

DownloadManager Information: 0 : Response headers:

HTTP/1.1 302 Found

Server: nginx

Date: Sat, 22 Oct 2016 07:53:40 GMT

Content-Type: text/html; charset=UTF-8

Connection: close

Pragma: no-cache

Cache-Control: no-cache

X-UA-Compatible: IE=edge,chrome=1

X-Frame-Options: SAMEORIGIN

Set-Cookie: VISITOR=580a9efbb6cbcd376fa4f5b3; expires="Tue, 20-Oct-2026 07:53:40 GMT"; httponly; Max-Age=315360000; Path=/

Set-Cookie: session_referrer=wpi://2.1.0.0/Microsoft Windows NT 6.3.9600.0; expires="Sat, 22-Oct-2016 08:53:40 GMT"; Max-Age=3600; Path=/

Set-cookie: sourceforge=339e2cf5c7570d8b215486f1194ce37a6f8a6c85gAJ9cQEoVQxsYW5kaW5nX3BhZ2VxAlU3L3Byb2plY3RzL3BocGluc3RhbGxlcm1zaS9maWxlcy96aXAvcnVucGhwLnppcC9kb3dubG9hZHEDVQNfaWRxBFUgNTlhMWIyZjU1YmUyNGUwNzg3MWRkYzJlNzQ5MGYwYTdxBVUDa2V5cQZVGDU4MGE5ZWZiYjZjYmNkMzc2ZmE0ZjViM3EHVQhfZXhwaXJlc3EIY2RhdGV0aW1lCmRhdGV0aW1lCnEJVQoH9gETAw4HAAAAhVJxClUFcHJlZnNxC31xDFUOX2FjY2Vzc2VkX3RpbWVxDUdB1gLGwR2+J1UOX2NyZWF0aW9uX3RpbWVxDkdB1gKnvuFId3Uu; expires=Tue, 19-Jan-2038 03:14:07 GMT; httponly; Path=/; secure

Location: http://downloads.sourceforge.net/project/phpinstallermsi/zip/php-5.5.38-nts-Win32-VC11-x86.zip?r=wpi%3A%2F%2F2.1.0.0%2FMicrosoft+Windows+NT+6.3.9600.0&ts=1477122820&use_mirror=netix

Content-Length: 261

X-Content-Type-Options: nosniff

DownloadManager Information: 0 : http://downloads.sourceforge.net/project/phpinstallermsi/zip/php-5.5.38-nts-Win32-VC11-x86.zip?r=wpi://2.1.0.0/Microsoft+Windows+NT+6.3.9600.0&ts=1477122820&use_mirror=netix responded with 302

DownloadManager Information: 0 : Response headers:

HTTP/1.1 302 Found

Location: http://netix.dl.sourceforge.net/project/phpinstallermsi/zip/php-5.5.38-nts-Win32-VC11-x86.zip

Content-Type: text/html; charset=UTF-8

Server: nginx

Date: Sat, 22 Oct 2016 07:53:41 GMT

content-disposition: attachment; filename="php-5.5.38-nts-Win32-VC11-x86.zip"

Set-Cookie: sf_mirror_attempt="phpinstallermsi:netix:zip/php-5.5.38-nts-Win32-VC11-x86.zip"; expires=120; Path=/

Content-Length: 173

Connection: close

DownloadManager Information: 0 : Number of bytes downloaded over the internet: '19695908'

DownloadManager Information: 0 : Number of bytes after possible decompression: '1320886'

DownloadManager Information: 0 : File 'C:\Users\Khodor\AppData\Local\Microsoft\Web Platform Installer\installers\PHP55ForIISExpress\A0738670BC728FEDDD074D1544D64739FD64956D\php-5.5.38-nts-Win32-VC11-x86.zip' already exists, deleting old copy of the file

DownloadManager Information: 0 : Moving downloaded file 'C:\Users\Khodor\AppData\Local\Temp\tmp2CA3.tmp' to: C:\Users\Khodor\AppData\Local\Microsoft\Web Platform Installer\installers\PHP55ForIISExpress\A0738670BC728FEDDD074D1544D64739FD64956D\php-5.5.38-nts-Win32-VC11-x86.zip

DownloadManager Error: 0 : Signature verification failed on downloaded file. URL: http://sourceforge.net/projects/phpinstallermsi/files/zip/php-5.5.38-nts-Win32-VC11-x86.zip/download. File location: C:\Users\Khodor\AppData\Local\Microsoft\Web Platform Installer\installers\PHP55ForIISExpress\A0738670BC728FEDDD074D1544D64739FD64956D\php-5.5.38-nts-Win32-VC11-x86.zip. File size: 1289 kb

DownloadManager Warning: 0 : Dependency failed for product 'WordPress'. Skipping install

Can anyone please help? This is getting really frustrating!

DownloadManager Warning: 0 : product.SelectedInstaller == null for: VC12RedistDownloadManager Information: 0 : Executing elevated installDownloadManager Information: 0 : Using cached file at C:\Users\Khodor\AppData\Local\Microsoft\Web Platform Installer\installers\WordPress\04dc96205ae4286f6b63420e01b0e03f0bad9ec9\wordpress-4.6.1-IIS.zip instead of downloading from https://github.com/Atomthin/WordPress_Windows_package/blob/master/wordpress-4.6.1-IIS.zip?raw=trueDownloadManager Information: 0 : Starting install sequenceDownloadManager Information: 0 : Downloading file 'http://sourceforge.net/projects/phpinstallermsi/files/zip/php-5.5.38-nts-Win32-VC11-x86.zip/download' to: C:\Users\Khodor\AppData\Local\Temp\tmp2CA3.tmpDownloadManager Information: 0 : http://sourceforge.net/projects/phpinstallermsi/files/zip/php-5.5.38-nts-Win32-VC11-x86.zip/download responded with 301DownloadManager Information: 0 : Response headers:HTTP/1.1 301 Moved PermanentlyLocation: https://sourceforge.net/projects/phpinstallermsi/files/zip/php-5.5.38-nts-Win32-VC11-x86.zip/downloadContent-Type: text/htmlServer: nginxDate: Sat, 22 Oct 2016 07:53:38 GMTContent-Length: 178Connection: close

DownloadManager Information: 0 : https://sourceforge.net/projects/phpinstallermsi/files/zip/php-5.5.38-nts-Win32-VC11-x86.zip/download responded with 302DownloadManager Information: 0 : Response headers:HTTP/1.1 302 FoundServer: nginxDate: Sat, 22 Oct 2016 07:53:40 GMTContent-Type: text/html; charset=UTF-8Connection: closePragma: no-cacheCache-Control: no-cacheX-UA-Compatible: IE=edge,chrome=1X-Frame-Options: SAMEORIGINSet-Cookie: VISITOR=580a9efbb6cbcd376fa4f5b3; expires="Tue, 20-Oct-2026 07:53:40 GMT"; httponly; Max-Age=315360000; Path=/Set-Cookie: session_referrer=wpi://2.1.0.0/Microsoft Windows NT 6.3.9600.0; expires="Sat, 22-Oct-2016 08:53:40 GMT"; Max-Age=3600; Path=/Set-cookie: sourceforge=339e2cf5c7570d8b215486f1194ce37a6f8a6c85gAJ9cQEoVQxsYW5kaW5nX3BhZ2VxAlU3L3Byb2plY3RzL3BocGluc3RhbGxlcm1zaS9maWxlcy96aXAvcnVucGhwLnppcC9kb3dubG9hZHEDVQNfaWRxBFUgNTlhMWIyZjU1YmUyNGUwNzg3MWRkYzJlNzQ5MGYwYTdxBVUDa2V5cQZVGDU4MGE5ZWZiYjZjYmNkMzc2ZmE0ZjViM3EHVQhfZXhwaXJlc3EIY2RhdGV0aW1lCmRhdGV0aW1lCnEJVQoH9gETAw4HAAAAhVJxClUFcHJlZnNxC31xDFUOX2FjY2Vzc2VkX3RpbWVxDUdB1gLGwR2+J1UOX2NyZWF0aW9uX3RpbWVxDkdB1gKnvuFId3Uu; expires=Tue, 19-Jan-2038 03:14:07 GMT; httponly; Path=/; secureLocation: http://downloads.sourceforge.net/project/phpinstallermsi/zip/php-5.5.38-nts-Win32-VC11-x86.zip?r=wpi%3A%2F%2F2.1.0.0%2FMicrosoft+Windows+NT+6.3.9600.0&ts=1477122820&use_mirror=netixContent-Length: 261X-Content-Type-Options: nosniff

DownloadManager Information: 0 : http://downloads.sourceforge.net/project/phpinstallermsi/zip/php-5.5.38-nts-Win32-VC11-x86.zip?r=wpi://2.1.0.0/Microsoft+Windows+NT+6.3.9600.0&ts=1477122820&use_mirror=netix responded with 302DownloadManager Information: 0 : Response headers:HTTP/1.1 302 FoundLocation: http://netix.dl.sourceforge.net/project/phpinstallermsi/zip/php-5.5.38-nts-Win32-VC11-x86.zipContent-Type: text/html; charset=UTF-8Server: nginxDate: Sat, 22 Oct 2016 07:53:41 GMTcontent-disposition: attachment; filename="php-5.5.38-nts-Win32-VC11-x86.zip"Set-Cookie: sf_mirror_attempt="phpinstallermsi:netix:zip/php-5.5.38-nts-Win32-VC11-x86.zip"; expires=120; Path=/Content-Length: 173Connection: close

DownloadManager Information: 0 : Number of bytes downloaded over the internet: '19695908'DownloadManager Information: 0 : Number of bytes after possible decompression: '1320886'DownloadManager Information: 0 : File 'C:\Users\Khodor\AppData\Local\Microsoft\Web Platform Installer\installers\PHP55ForIISExpress\A0738670BC728FEDDD074D1544D64739FD64956D\php-5.5.38-nts-Win32-VC11-x86.zip' already exists, deleting old copy of the fileDownloadManager Information: 0 : Moving downloaded file 'C:\Users\Khodor\AppData\Local\Temp\tmp2CA3.tmp' to: C:\Users\Khodor\AppData\Local\Microsoft\Web Platform Installer\installers\PHP55ForIISExpress\A0738670BC728FEDDD074D1544D64739FD64956D\php-5.5.38-nts-Win32-VC11-x86.zipDownloadManager Error: 0 : Signature verification failed on downloaded file. URL: http://sourceforge.net/projects/phpinstallermsi/files/zip/php-5.5.38-nts-Win32-VC11-x86.zip/download. File location: C:\Users\Khodor\AppData\Local\Microsoft\Web Platform Installer\installers\PHP55ForIISExpress\A0738670BC728FEDDD074D1544D64739FD64956D\php-5.5.38-nts-Win32-VC11-x86.zip. File size: 1289 kbDownloadManager Warning: 0 : Dependency failed for product 'WordPress'. Skipping install

IIS 8.5 on Windows 2012 R2 returns the incorrect intermediate certificate

$
0
0

Hi everyone.  I thought I would get a forum post going here regarding this issue as it seems to be specific to IIS 8.5..  Please read the problem description here:

https://community.letsencrypt.org/t/certificates-issued-by-lets-encrypt-authority-x3-not-valid-in-mozilla/13320/30

My posts are by "actyler1001"..

Basically the Let's Encrypt project changed their intermediate certificate recently for new cert requests and renewals.  It seems to use the same "X509v3 Identifiers" as the old one.

Let’s Encrypt Authority X1   <old one>

Let’s Encrypt Authority X3   <new one>

https://letsencrypt.org/certificates/

  Even after deleting all remnants of the old intermediate certificate from the certificate store, the chain on the renewed cert is still broken because the X1 intermediate is still being served by IIS.  Which makes the iPhone and firefox angry among other things.  I haven't tested yet, but from what I am reading, older versions of Windows/IIS as well as Apache don't seem to have this problem.

After all of my troubleshooting, I am thinking there is some hidden certificate cache that needs to be cleared on the web server.  I have been over and over the cert store though and there is nothing..

Here are the troubleshooting steps so far. (Thank you holger1)

- removed all bindings in IIS
- export certificate (not including chain)
- remove all certificates from store (including LE Authority X1, LE Authority X3 intermediates and DST Root CA X3)
- clear cache (certutil -urlcache * delete)
- reboot
- import DST Root CA X3 + LE Authority X3
- import my certificate (alternatively request a new one from LE)
- Configure binding in IIS to use my certificate

Result is always the same:
- Certification path in certstore shows correct path: myCert -> LE Authority X3 -> DST Root CA X3
- LE Authority X1 NOT in certificate store (cannot find it anywhere on the machine)
- ssllabs.com report invalid served chain: myCert -> LE Authority X1 -> DST Root CA X3
- When I open the site in IE on the server itself I can see the chain: myCert -> Le Authority X1 -> DST Root CA C3 as well (note: When I show the chain on the same machine via certificate store I get the correct chain)

Viewing all 27852 articles
Browse latest View live




Latest Images