Exchange Server Forums

Can I RPC over HTTP - without SSL certificate?

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [Microsoft Exchange 2007] >> General >> Can I RPC over HTTP - without SSL certificate?

Page: [1]

Message

<< Older Topic Newer Topic >>

Limited time MSExchange.org offer! -- 1.Sep.2008 1:00:00 PM

TechGenix and SolarWinds have partnered to provide free copies of SolarWinds Exchange Monitor to all visitors who join the MSExchange.org Forums. SolarWinds Exchange Monitor is a handy desktop dashboard that continuously monitors Microsoft Exchange to deliver real-time insight into Exchange services, mail queue sizes, and host server health. Learn more about Exchange Monitor and the free offer!

Can I RPC over HTTP - without SSL certificate? - 24.Jul.2007 7:31:04 PM

x0x0

Posts: 17
Joined: 19.Jun.2007
Status: offline

Hi. I Have Exchange 2007 running. I am wondering if it is possible to setup RPC over HTTP only, therefore without use of certificates. I am asking because I cannot set this up.

If I untick SSL in IIS for RPC in comes up later automatically (I dont know why?).
Do I have to setup ports 6001-6004 in registry as with Exchange 2003?

My aim is to try it first without certificates and then purchase them.

Thank you help

Post #: 1

Featured Links*

RE: Can I RPC over HTTP - without SSL certificate? - 24.Jul.2007 8:02:42 PM

toddconley

Posts: 4
Joined: 13.Jul.2007
Status: offline

You can get started with a free SSL cert from startcom , it works very well. The linked tutorial applies to RPC over HTTPS with Exchange 2007.

http://www.msexchange.org/tutorials/SSL-Enabling-OWA-2003-Using-Free-3rdParty-Certificate.html

(in reply to x0x0)

Post #: 2

RE: Can I RPC over HTTP - without SSL certificate? - 24.Jul.2007 8:25:36 PM

John Weber

Posts: 618
Joined: 20.Apr.2005
From: Portland, Oregon
Status: offline

Yes you can.
The RPC vdir under the default website needs to be no-SSL.
Not recommended as usernames and pw will be in the clear.

As for the 6001 ports, no, that is not part of the OA setup.

What problem are you having. Perhaps with a bit more detail we can get you back on an SSL track.

quote:

ORIGINAL: x0x0

Hi. I Have Exchange 2007 running. I am wondering if it is possible to setup RPC over HTTP only, therefore without use of certificates. I am asking because I cannot set this up.

If I untick SSL in IIS for RPC in comes up later automatically (I dont know why?).
Do I have to setup ports 6001-6004 in registry as with Exchange 2003?

My aim is to try it first without certificates and then purchase them.

Thank you help

(in reply to x0x0)

Post #: 3

RE: Can I RPC over HTTP - without SSL certificate? - 24.Jul.2007 10:05:54 PM

x0x0

Posts: 17
Joined: 19.Jun.2007
Status: offline

Thanks for help. My intention is to setup this without SSL first (Boss wants to see this working ASAP, then he will decide about SSL certificate - cannot do anything about it.

Basically, I followed the howto for exchange 2003 and also white papers of how to setup OWA in exchange 2007.

Webmail does work no problems. Pushmail does work no problems.

In IIS I configured RPC directory for:
Integrated windows auth.
Basic auth.
No SSL.

When I restart IIS, after while the SSL is again ticked???

When I configure Outlook for external address on my firewall which is redirecting to exchange Outlook tells me that it cannot find it. I unticked the SSL option in Outlook P settings. Also in outlook I have on both places the external DNS for our server. In exchange server as in HTTP settings.

I have got port 80 open on firewall. Do I have to have any other port open?

On Exchange 2007, I have Outlook Anyware enabled with basic outhentication.

Can you please help me with this. I don't know where could be the mistake.

< Message edited by x0x0 -- 24.Jul.2007 10:13:27 PM >

(in reply to John Weber)

Post #: 4

RE: Can I RPC over HTTP - without SSL certificate? - 24.Jul.2007 11:21:04 PM

x0x0

Posts: 17
Joined: 19.Jun.2007
Status: offline

Ok, I just discused the certificate with my boss I can go for it. It is going to be easier. Now.

Would you recomend any particural CA? I would like to go trial and then cheap.

(in reply to x0x0)

Post #: 5

RE: Can I RPC over HTTP - without SSL certificate? - 25.Jul.2007 2:19:19 AM

Henrik Walther

Posts: 6848
Joined: 21.Nov.2002
From: Copenhagen, Denmark
Status: offline

GoDaddy.com have SSL certificates for 20$ per year, bear in mind though they don't offer SAN certificates as of yet.

_____________________________

HTH
Henrik Walther
Exchange MVP | MCM: Exchange 2007
MCITP: EMA, MCITP: EA, MCSE: M+S

Order my Exchange Server 2007 Book!

(in reply to x0x0)

Post #: 6

RE: Can I RPC over HTTP - without SSL certificate? - 26.Jul.2007 12:47:02 AM

BeTaCam

Posts: 420
Joined: 24.Feb.2003
From: India
Status: offline

Choose a CA who supports SAN [ subject alternate name].
Verisign for sure is not supporting it.

Hth

/BC

(in reply to Henrik Walther)

Post #: 7

RE: Can I RPC over HTTP - without SSL certificate? - 28.Jul.2007 6:42:23 PM

Henrik Walther

Posts: 6848
Joined: 21.Nov.2002
From: Copenhagen, Denmark
Status: offline

If you decide to purchase a SAN certificate, I can highly recommend DigiCert. They have reasonable prices compared to the other CA providers and fantastic support.

I use these guys myself (when customer allows it that is).

_____________________________

HTH
Henrik Walther
Exchange MVP | MCM: Exchange 2007
MCITP: EMA, MCITP: EA, MCSE: M+S

Order my Exchange Server 2007 Book!

(in reply to BeTaCam)