Schannel.dll problems

[jwalz]

The version of schannel.dll that i have on my server is dated 11/18/99 and is ~122K in size. Does anyone know if this version is know to cause problems for people trying to access pages using SSL? I am running IIS 4.0 on NT 4.0 with SP 6.0. For users outside of my building, accessing a page over SSL hangs and eventually times out. Inside my building, no problem. The page is on our internet server using Basic Authentication on the secure directory portion of the site.

Can anyone suggest something. I have been banging my head againt the wall on this thing all week and none of the articles that I have found, here or on Microsoft's site, make any difference. It appears as though it is set up properly and like I said it running properly from inside my building.

Any help at all would be greatly appreciated.

Thanks.

 

[click]

Did you ever get this resolved? We seem to have the same problem. Thanks.

 

[jwalz]

Unfortunately,no. We haven't gotten this resolved. We are currently looking in to hiring outside consultants to come in and investigate and fix the problem. And insight that you have with your situation would be appreciated.

 

[epohl]

If people inside the building can get to it and noone outside is able to access it sounds like it could be a firewall problem or possibly a router. You might want to make sure the external people can at least ping the web server and then check the firewall to see if port 443 is open.

 

[jwalz]

We have checked into that and that seems to be setup ok. When the certificate is "on", you can't get to the https address from the outside and when the certificate is "off" there is no problem getting to the same address via http.

 

[epohl]

What error do they recieve when they try to access it using https? Is this a certificate you created yourself or one that was purchased for Verisign or another vendor?

 

[epohl]

jwalz,

This article should be very helpful, explains how to use telnet to see if port 443 is blocked before it reachs the webserver.

http://support.microsoft.com/support/kb/articles/Q290/0/51.ASP

 

[click]

Have you set up the address as secure on the IIS console? <your site> properties>Web site>advanced you should see the inside address, as well as the outside address. Also, on the multiple SSL identities, the port should be 443.