Problem Publishing SSL Listener for site hosted in DMZ

I have TMG 2010 set up in a 3 Legged approach: External, Perimeter (DMZ) and Internal. I have a webserver in the DMZ which hosts multiple websites, one of which requires an SSL connection. I have set up an SSL listener and installed the certificate
for the domain in the Personal storage on the Local Machine (the TMG) and published a website site rule which uses the SSL Listener.
However, when trying to access the site over HTTPS I get the error:
"Error Code: 500 Internal Server Error. The certificate chain was issued by an authority that is not trusted. (-2146893019)"
The certificate is from a valid certificate authority (Global Sign) and is confirmed in my Internet Browser.
When testing the rule from the TMG I get this error:
"Time reported by the Microsoft Forefront TMG Firewall Service: 0.010 seconds
Testing https://appstore.mydomain.com:443/
Category: Destination server certificate error
Error details: 0x80090325 - The certificate chain was issued by an authority that is not trusted."
I read that this is caused that when the certificate is not in the Trusted Root. I have copied the certificate from Personal into Trusted Root and the same problem persists.

Hi，
Did you install the root CA certificate into the Trusted Root Certificate Authorities under the Current User store?
Based on my experience, it should be added into Certificates (Local Computer).The Current User certificate store is local to a user account on the computer, but the Local Computer certificate store is local to the computer and is global to all users on the
computer.
You can follow the steps in the article below to view the certificate stores for the computer:
How to: View Certificates with the MMC Snap-in
Best regards,
Susie

Similar Messages

Tnsnames problem on RAC server for Different Host Names

Hi All,
We have RAC database setup and we are facing one issue on tnsnames.
My Hostfile has these entries:
127.0.0.1 loopback localhost
# Public Network
204.7.242.215 oradb1
204.7.242.217 oradb2
# Management network
174.19.1.151 oradb1_mgt
174.19.1.154 oradb2_mgt
# Rac VIP
204.7.242.216 oradb1-vip1
204.7.242.218 oradb2-vip2
# Rac HeartBeat
10.10.10.1 oradb1-priv1
10.10.10.2 oradb2-priv2
Where oradb1_mgt pointing to same host as oradb1 and oradb2_mgt>oradb2
Due to management issue, we need to use oradb1_mgt in place of oradb1 or oradb1-vip1 for standby database. So I've configured my Listener.ora as
LISTENER_ORADB1 =
(DESCRIPTION_LIST =
(DESCRIPTION =
(ADDRESS = (PROTOCOL = TCP)(HOST = oradb1-vip1)(PORT = 1521)(IP = FIRST))
(ADDRESS = (PROTOCOL = TCP)(HOST = oradb1)(PORT = 1521)(IP = FIRST))
(ADDRESS = (PROTOCOL = TCP)(HOST = oradb1_mgt)(PORT = 1521)(IP = FIRST))
and Tnsnames.ora as
prd =
(DESCRIPTION =
(ADDRESS = (PROTOCOL = TCP)(HOST = oradb1_mgt)(PORT = 1521))
(CONNECT_DATA =
(SERVER = DEDICATED)
(SERVICE_NAME = aixdb)
(INSTANCE_NAME = aixdb1)
But tnsping prd is giving error:
TNS Ping Utility for IBM/AIX RISC System/6000: Version 10.2.0.3.0 - Production on 07-JUN-2007 14:28:18
Copyright (c) 1997, 2006, Oracle. All rights reserved.
Used parameter files:
/u01/app/oracle/product/10.2.0/db_1/network/admin/sqlnet.ora
TNS-03505: Failed to resolve name
What may be the solution for this. Its look like that, HOST = oradb1_mgt is creating problem as if I'm putting HOST = oradb1 or OST = oradb1-vip1, then its working.
Regards
Rakesh

I have signed applets but not with jmf. Your best bet is to put the applet in a jar and sign the jar. Most java runtimes with a self signed applet will prompt the user and ask the user if they want to grant permission. You probably have to use the java html converter to code your html to force the use of suns plugin. I am not sure if you have to sign the jmf jars or they may already be signed.

Problem publishing the IPA for iOS

I can publish an IPA for iOS using my Distribution Certificate, but I can't do it with my Developer Certificate. The developer certificate I'm using works in Flash CS6, Any idea about what I may be doing wrong?
Akita

I'm a bit confused.
iOS is what is found inside iPads, iPhones and iPods, and nothing else. It is not found in a Mac, which runs Mac OS, rather than iOS.
If you are on a Mac, please do quote the message EXACTLY.
Also, what is the name of the current App? The current app name is shown at the very top of the screen, in the menu bar, right after the Apple icon.

Problems installing SSL certificates for more than one alias on iMS 5.2

I have a problem to getting encyption on IMAP/HTTP/SMTP when they are on the same server. I only getting one SSL certificate installed by the Netscape console wizard, and therefore only one alias.
Let's say I have 3 aliases to the same server just for the scalability, imap.vxu.se, smtp.vxu.se and mail.vxu.se for http (https). Then I can only have one certificate installed at the same time, for example https://mail.vxu.se. And the others, like (S)IMAP I getting a dialouge that says the hostname doesnt is the same as the registred in the certificate. How do I solve this? Is there some possibillity to install more than ONE certificate, so I can have one certificate for each alias?
Environment: Full 420R, Solaris 8, iMS5.2
Thanks in advice

Although I completely agree the comments that suggestion this is not a great configuration idea, the error you are seeing ("...bean not found...") likely has nothing to do with the configuration - at least not as mentioned. My first guess is that if you are running the same exact form (FMX) as you ran for your first test then there should be no error. The only way such an error would appear is if the proper jar files are not being pulled to the client JRE or if the fmx was not properly generated. Be sure you are including config=webutil in the URL or that you have added the Webutil configuration info to your own named configuration section of formsweb.cfg
Regardless, if this is a Windows machine, the probability of having problems with multiple installations of the same version is high. Consider that the system PATH, CLASSPATH, ORACLE_HOME and various other system variables needed by the server side of the installation will overlap for each installation. This will cause problems. On the client side, attempting to download jars of the same name from the same server, but which are not actually the same files will confuse the JRE. If the JRE detects that a file which it has already cached is coming from the same server (host) then it will not attempt to pull it again. This will be a problem if the jars are not exactly the same in both installation. Making the problem worse is that you may not be able to easily determine from which installation the jars (or any files) were obtained.
So. as a general rule, regardless of whether multple installations can co-exist, I would not recommend it. This is especially true on a Windows platform.

Hippa Compliance for sites hosted by Business Catalyst?

My client's website needs to be Hippa Compliant. I want to build their site in Muse and have it hosted by Adobe Business Catalyst. Is that possible? Anything out of the ordinary I need to know? Thanks in advance for any help.

Thank you. Do you know if that will be an option in the future?
Sent from my Verizon Wireless 4G LTE Smartphone

Problem installing SSL certificate for CPS

I work at a medium-sized University, and we have used
Contribute 3 with CPS1.11 for well over a year. Recently, however,
the Contribute clients began having difficulty logging in to CPS.
At first this was intermittent, but is now constant. Adobe support
suggested replacing the CPS self-signed SSL certificate with a
genuine one, because apparently the self-signed certificate is
causing communication delays and timeouts.
I have the certificate, and am trying to use keytool (see
http://java.sun.com/j2se/1.4.2/docs/tooldocs/windows/keytool.html)
to install it, but it is asking me for a keystore password, which I
don't know. Apparently the standard defaults are "changeit" or
"passphrase", but neither of these work.
As a test, I created a fresh install of CPS and attempted to
list the keys in the keystore, but again was asked for a keystore
password and the defaults did not work. Adobe support suggested I
ask here. Anybody have any experience installing a certificate for
CPS?

Are you sure that the certificate needs to be installed to all users? Can you provide more details about the certificate and its purposes?
My weblog: en-us.sysadmins.lv
PowerShell PKI Module: pspki.codeplex.com
PowerShell Cmdlet Help Editor pscmdlethelpeditor.codeplex.com
Check out new:
SSL Certificate Verifier
Check out new:
PowerShell FCIV tool.

Problems in SSL setup for implementing SLM in the solution manager

Hello,
We are implementing Software Lifecycle manager (SLM) in our SolMan system.
On the step of setting-up SSL, we are no able to see SSL certificate in "view certificate" in our browser.
While trying to import certificate in visual admin we refered Note 1138061 - Maintenance Optimizer: HTTPS Connection for SLM, went to according to note .
On the step 3) Choose "Cluster -> Server... -> Services -> SSL Provider". In the port 5<nr>01, add the new certificate to "Enabled Credential". we are not able to find port 50001, also we are not able to create it in visual admin..
Please suggest.
Thanks,
Shobhit Garg

Issue resolved whithe help of SAP note 510007
Thanks,
Shobhit garg

Problem creating custom tags for site that has no outside internet connecti

I've created a set of custom tags that work fine until we install our app at the customer site. The customer site has no outside Internet access, and so the DOCTYPE is failing since it references the web-jsptaglibrary_1_1.dtd located on Sun's site.
I tried copying the dtd locally and got it to work, but the solution sucks because this web-jsptaglibrary_1_1.dtd file is referenced in both my taglib.tld file AND the web-jsptaglibrary_1_1.dtd itself. Soooo....I can put in a URL that references it on the local machine, e.g.,
In the taglib.tld file:
<!DOCTYPE taglib PUBLIC "-//Sun Microsystems, Inc.// DTD JSP Tag Library 1.1//EN"
"http://ClientAAA/web-jsptaglibrary_1_1.dtd">
In the web-jsptaglibrary_1_1.dtd file:
<!ATTLIST taglib id ID #IMPLIED
xmlns CDATA #FIXED
"http://ClientAAA/AdProduction/web-jsptaglibrary_1_1.dtd"
>
but that means for every client that uses this app (and we have several) I have to change that URL inside both these files.
I tried simply changing it to the relative "web-jsptaglibrary_1_1.dtd", e.g.,
taglib.tld:
<!DOCTYPE taglib PUBLIC "-//Sun Microsystems, Inc.// DTD JSP Tag Library 1.1//EN"
"web-jsptaglibrary_1_1.dtd">
web-jsptaglibrary_1_1.dtd:
<!ATTLIST taglib id ID #IMPLIED
xmlns CDATA #FIXED
"web-jsptaglibrary_1_1.dtd"
>
but then it is requiring me to put the dtd in both my web app root directory AND my jakarta/bin directory. I get the following error:
XML parsing error on file ../vtaglib.tld: java.io.FileNotFoundException: D:\jakarta\jakarta-tomcat-4.1.29\bin\web-jsptaglibrary_1_1.dtd (The system cannot find the file specified)
It seems like I must be missing something here. This shouldn't be this hard. And it seems funny that to use custom tags, you have to have Internet access in the first place.
Help!!! :)
Thanks.

Yeah, I think it's a bit ridiculous that in order to make all the tag library examples and instructions work, you have to have access to the Internet. I haven't seen a single example on how to make it work if there is no Internet access. That's very limiting. And I've tried all sorts of other ways of doing it, such as
<!DOCTYPE taglib SYSTEM "web-jsptaglibrary_1_1.dtd">
but even then it won't work because I get an error message saying:
XML parsing error on file /assets/../vtaglib.tld: java.io.FileNotFoundException: D:\jakarta\jakarta-tomcat-4.1.29\bin\web-jsptaglibrary_1_1.dtd (The system cannot find the file specified)
I just don't think I should have to place this file in the bin directory. There has to be another way. Do I need to modify the dtd somehow? Cuz the dtd has the following line...is this messing it up??
<!ATTLIST taglib id ID #IMPLIED xmlns CDATA #FIXED "web-jsptaglibrary_1_1.dtd">
I sure could use some help.

Single SSL Web Listener for hosting multiple web sites

Hi All,
We are currently hosting multiple websites with Single HTTP Web Listener .. As of now it's everything is working fine..
Now we have planned to have SSL for the hosted sites
Each hosting site will have different SSL Certificates and i am little confused to use Single SSL Web Listener to host multiple web Sites...
Can any one guide me to use Singel SSL Listener for using all hosted sites..
We are having TMG on DMZ Network on Single Nic..
KJSUBBU

Hi,
it is no problem to host multiple SSL websites with only one IP address / certificate on the TMG Server. Only the authentication options for the published websites must be unique, because you cannot use multiple authentication options in one Listener
TMG Server uses HTTPS to HTTPS bridging, so you can use Host header and more to distinguish between the different internal websites:
http://technet.microsoft.com/en-us/library/cc995178.aspx
Regarding the SSL certificate on the internal webservers. TMG must trust the issuing certificate authority which issued certificates for these websites and the name you used to connect from the TMG Server to the internal webserver must part of the CN (Common
Name) or SAN (Subject Alternate Name) on the certificates of the webservers
regards Marc Grote aka Jens Baier - www.it-training-grote.de - www.forefront-tmg.de - www.galileocomputing.de/3276?GPP=MarcGrote

Multiple Buttons in JTable Headers: Listening for Mouse Clicks

I am writing a table which has table headers that contain multiple buttons. For the header cells, I am using a custom cell renderer which extends JPanel. A JLabel and JButtons are added to the JPanel.
Unfortunately, the buttons do not do anything. (Clicking in the area of a button doesn't appear to have any effect; the button doesn't appear to be pressed.)
Looking through the archives, I read a suggestion that the way to solve this problem is to listen for mouse clicks on the table header and then determine whether the mouse clicks fall in the area of the button. However, I cannot seem to get coordinates for the button that match the coordinates I see for mouse clicks.
The coordinates for mouse clicks seem to be relative to the top left corner of the table header (which would match the specification for mouse listeners). I haven't figured out how to get corresponding coordinates for the button. The coordinates returned by JButton.getBounds() seem to be relative to the top left corner of the panel. I hoped I could just add those to the coordinates for the panel to get coordinates relative to the table header, but JPanel.getBounds() gives me negative numbers for x and y (?!?). JPanel.getLocation() gives me the same negative numbers. When I tried JPanel.getLocationOnScreen(), I get an IllegalComponentStateException:
Exception in thread "AWT-EventQueue-0" java.awt.IllegalComponentStateException: component must be showing on the screen to determine its location
Can someone tell me how to get coordinates for the button on the JTableHeader? Or is there an easier way to do this (some way to make the buttons actually work so I can just use an ActionListener like I normally would)?
Here is relevant code:
public class MyTableHeaderRenderer extends JPanel implements TableCellRenderer {
public MyTableHeaderRenderer() {
setOpaque(true);
// ... set colors...
setBorder(UIManager.getBorder("TableHeader.cellBorder"));
setLayout(new FlowLayout(FlowLayout.LEADING));
setAlignmentY(Component.CENTER_ALIGNMENT);
public Component getTableCellRendererComponent(JTable table,
                                                 Object value,
                                                 boolean isSelected,
                                                 boolean hasFocus,
                                                 int row,
                                                 int column){
if (table != null){
    removeAll();
    String valueString = (value == null) ? "" : value.toString();
    add(new JLabel(valueString));
    Insets zeroInsets = new Insets(0, 0, 0, 0);
    final JButton sortAscendingButton = new JButton("1");
    sortAscendingButton.setMargin(zeroInsets);
    table.getTableHeader().addMouseListener(new MouseAdapter(){
      public void mouseClicked(MouseEvent e) {
        Rectangle buttonBounds = sortAscendingButton.getBounds();
        Rectangle panelBounds = MyTableHeaderRenderer.this.getBounds();
        System.out.println(Revising based on (" + panelBounds.x + ", "
                           + panelBounds.y + ")...");
        buttonBounds.translate(panelBounds.x, panelBounds.y);
        if (buttonBounds.contains(e.getX(), e.getY())){ // The click was on this button.
          System.out.println("Calling sortAscending...");
          ((MyTableModel) table.getModel()).sortAscending(column);
        else{
          System.out.println("(" + e.getX() + ", " + e.getY() + ") is not within "
                             + sortAscendingButton.getBounds() + " [ revised to " + buttonBounds + "].");
    sortAscendingButton.setEnabled(true);
    add(sortAscendingButton);
    JButton button2 = new JButton("2");
    button2.setMargin(zeroInsets);
    add(button2);
    //etc
return this;
}

I found a solution to this: It's the getHeaderRect method in class JTableHeader.
table.getTableHeader().addMouseListener(new MouseAdapter(){
public void mouseClicked(MouseEvent e) {
    Rectangle panelBounds = table.getTableHeader().getHeaderRect(column);
    Rectangle buttonBounds = sortAscendingButton.getBounds();
    buttonBounds.translate(panelBounds.x, panelBounds.y);
    if (buttonBounds.contains(e.getX(), e.getY()) && processedEvents.add(e)){ // The click was on this button.
      ((MyTableModel) table.getModel()).sortAscending(column);
});

Publishing an Adobe Muse site to a third party hosting provider?

Hi Guys,
I'm trying to find instructions as to how to go about publishing my completed Adobe Muse site which is hosted with a third party hosting company, there are videos for publishing to business catalyst alright.
Any help would be greatly appreciated...
Thanks
Have a nice Saturday :-)

I am having a problem trying to FTP my site created in Muse, too. I am using "Upload to FTP host" (Found under File) and after several tries I am still getting a different error message each time: "Error uploading (a certain file which happens to be a jpg this time!). Click Resume to try again. If this problem persists, try again later.
[426 Failure reading network stream.]."
I tried again and again and again. So I called the host company and I checked to see if am using all the correct settings that they have.They verified that I had the proper settings.
Still no success.

Problem publishing my iWeb site to new server

I have a problem publishing my site to a new server HostGator.
I click publish, everything continues normally, then I get an ERROR notice:
Publish Error
There was an error communicating with the FTP server.
Try again later, or check with your service provider
Since I changed the settings for the new server all the iWeb pages symbols go pink every time I close and reopen iWeb. Once I have tried to publish and get the ERROR notice I see that most of the pages have turned blue (suggesting they have been correctly published) and the same 5 pages remain pink (suggesting they have not been published) I have used the HostGator link
http://gator694.hostgator.com/~carouge1/carouge-art/Welcome.html
to look at the uploaded pages.
All the pages are on their server file BUT the pages which remain pink on iWeb have problems. These problems (missing photos etc.) don't seem to affect the pages when the site is called up normally. The site is apparently still being uploaded to people’s computers through MobileMe eventhough I have changed the server settings! So I’m assuming the page problems will show up after MobileMe stops at the end of this month? I cannot find an explanation for the failed pages from HostGator or from the Apple online answers.
Grateful for any advice.

I am having a similar problem trying to upload from iWeb through FTP to MacHighway web hosting.
I am using iWeb 3.0.4, the latest version.
I have followed the instructions on the MacHighway site: https://customers.machighway.com/knowledgebase.php?action=displayarticle&id=10
When I type "public_html" into Directory/Path window in iWeb I get the following message:
Testing failed.
The directory/path couldn't be found. Verify your settings and try again.
When I type "/public_html" or /public_html/" into Directory/Path window in iWeb I get the following message:
Testing failed.
A connection to mel.machighway.com couldn't be established. Verify your settings and try again.
Unlike carougeart, however, nothing gets uploaded.

Problem in configuring SSO using SAML for applications hosted on diff m/c

Hi Techies,
I am stuck in a weird problem for past month or so without any resolution. Not much help by googling. So I hope i get the answer from the mouth of the horses -
I am trying to use SSO using the sample application appA and appB as stated in the tutorial of SSO by BEA.
I am summarizing the problem below -
Steps followed for Configuring SSO using SAML
1. Created 2 domains on 2 seperate machines namely domainA and domainB
2. Source appliction is deployed on domainA and the target application is deployed on domaninB
The steps mentioned in the following tutorial has been followed-
http://dev2dev.bea.com/pub/a/2006/12/sso-with-saml.html
3. As mentioned in the tutorial the certificate is generated using keytool utility. The same certificate is copied
to WEBLOGIC_HOME/server/lib of destination machine.
4. The certificate was successfully registered on desitnation or host 2 but while activating the configuration
changes(SSL client Ientity Alias and SSL Client Identity Pass Phrase) for Federation services the following error
is thrown -
" SAMLBeanUpdateListener: SAMLKeyManager.prepareUpdate() failed with exception:
weblogic.descriptor.BeanUpdateRejectedException: SAML key Manage failed to validate key (SSL Client) configuration
in the FederationServicesMBean, key alias: testalias "
The interesting bit of the problem is that the same configuration works on 2 domains created on same machine. The
problem only occurs when domains are created on seperate machines.
Alterative to the problem: when the certificate is generated seperately for domainB and copied to
WEBLOGIC_HOME/server/lib, it works. However, the certificate generated in domainA should have been copied.
Note: I am using Weblogic portal 9.2.1
Any quick replies will be much appreciated. Thanks.
Edited by saurabh.agrawal at 02/06/2008 2:01 PM

Hi François,
You are right about the use of the NameID format. But the issue here is/was that OIF at SP is integrated with OAM, and the authenticated user at OIF-SP and OAM will be the Anonymous user rather than the user who was identified at the IdP even though the remaining attributes sent are for the IdP user. I think these attributes can be used by with OAM for authorization using custom authorization plug-ins but haven't tried that one out.
As for the attribute sharing profile, it's this one - http://www.oasis-open.org/committees/download.php/18058/sstc-saml-x509-authn-attrib-profile-cd-02.pdf, although for the life of me, I cannot remember why I suggested this in the first place!
-Vinod

I'm using a Mac. After swithcing to ICloud will I be able to use IWeb to upload and publish my sites hosted by other servers like Prohosting ?

I'm using a Mac. After swithcing to ICloud will I be able to use IWeb to upload and publish my sites hosted by other servers like Prohosting ?

iWeb has two other ways to publish your site...
http://www.iwebformusicians.com/iWeb/Publish-Website.html
... and the second method allows you a choice of how you upload the files...
http://www.iwebformusicians.com/iWeb/URLs-Favicons.html
Here's a publishing workflow checklist...
http://www.iwebformusicians.com/Search-Engine-Optimization/Website-Publishing-Wo rkflow.html
The MobileMe only features can be replaced by alternatives...
http://www.iwebformusicians.com/iWeb/Comments-Password-Protect.html
If you have folders of assets outside of the main website folder on MobileMe, download them from the Apple server. From the Finder Go menu, follow the path iDisk/My iDisk/ to get there. Your website files are in the Web/Sites folder. Drag any files/folders onto the desktop.
Use an FTP application to upload these assets to the root folder on your new server...
http://www.iwebformusicians.com/Search-Engine-Optimization/Upload.html
...and change the relevant URLs to...
http://www.domain-name.com/Folder-Name/file-name.file-extension
There are lots of options for hosting for about half the cost of MobileMe...
http://www.iwebformusicians.com/iWeb/Website-Hosting.html
If you have been using a web.me.com domain name, you need to register a new one. Most hosting services give you at least one free and registering with your hosting company will make forwarding and managing it a lot easier.
Make sure you add the new name to Google and create, upload and enter a new sitemap.xml...
http://www.iwebformusicians.com/Search-Engine-Optimization/SEO.html
If you have inbound links on other sites...
http://www.iwebformusicians.com/Search-Engine-Optimization/Inbound-Link.html
... remember to inform the webmasters of you new URL.
"I may receive some form of compensation, financial or otherwise, from my recommendation or link."

How do i publish to a public site through iweb for free?

how do i publish to a public site through iweb for free?

http://000webhost.com offers free web hosting, but, if no website is uploaded or it did not received more than 10 visitors in 30 days they will delete your account.
I opted for paid web hosting "IX Web hosting" which charges $3.95 a month
I have more info on my site or blog

Problem Publishing SSL Listener for site hosted in DMZ

Similar Messages

Maybe you are looking for