如何在同一IIS中对SharePoint网站使用单独的SSL证书 [英] How to use Separate SSL certificates for SharePoint sites in same IIS

问题描述

我有一个面向公众的网站，例如www.abc.com，是在SharePoint 2013中开发的，仅匿名访问(默认区域)，并且为了管理内容，我使用 support.abc.com .我配置了 www.abc.com   从DigiCert购买的标准SSL证书并在站点上正常运行的HTTPS可以正常工作.对于扩展站点 support.abc.com，我尝试使用颁发的SSL证书 由我们的内部证书服务器提供，但是IIS不允许为支持站点使用单独的证书.我通过在IIS中使用SNI(服务器名称指示)来了解有关此问题的解决方法，但此方法不起作用.我检查了IIS中的SNI设置以获得support.abc.com 并且IIS接受了内部颁发的证书，但是当我浏览站点时，它首先显示证书错误，然后在前进时显示无法显示页面错误.有什么建议?

解决方案

您的Windows版本是什么?

某些客户端不支持SNI.请尝试IE 7或更高版本的IE并比较结果.

注意:SNI在Windows XP上不可用.

有关更多信息，您可以查看以下博客:

https://blogs.msdn.microsoft.com/sambetts/2015/02 /13/running-multiple-sharepoint-ssl-websites-on-separate-ssl-certificates-using-server-name-indication/

最好的问候，

Linda Zhang

I have a public facing site, say www.abc.com developed in SharePoint 2013 with anonymous access only (default zone) and for managing content, I extended the same site with integrated windows authentication in Intranet zone, call it support.abc.com. I configured www.abc.com as HTTPS with a standard SSL certificate purchased from DigiCert and site works fine.  For extended site support.abc.com, I was trying to use SSL certificate issued by our internal certificate server, but IIS is not allowing to use a separate certificate for the support site. I read about a workaround for this by using SNI(Server name indication) in IIS, but it did not work. I checked the SNI setting in IIS for support.abc.com and IIS accepted the internally issued certificate, but when I browse the site, it shows certificate error first then when advance it shows page cannot be displayed error. Any suggestions? Thanks in advance.

解决方案

Hi Nash8389,

What is version of your Windows?

Some clients don’t support SNI. Please try IE 7 or later version of IE and compare the results.

Note: SNI is unavailable on Windows XP.

For more information, you could check the following blog:

https://blogs.msdn.microsoft.com/sambetts/2015/02/13/running-multiple-sharepoint-ssl-websites-on-separate-ssl-certificates-using-server-name-indication/

Best Regards,

Linda Zhang

这篇关于如何在同一IIS中对SharePoint网站使用单独的SSL证书的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！