IIS Categories | sysinfo i/o

September 30, 2016 12:33 pm By Travis Leave a Comment

Using Let’s Encrypt with IIS on Windows

Let's Encrypt is a new open source certificate authority that promises to provide free SSL certificates in a standardized, API accessible and non-commercial way. If you've installed SSL certificates in the past, you're probably familiar with the process of signing up for a certificate with some paid for provider and then going through the manual process of swapping certificate requests and completed requests. Let's Encrypt is based on set of open service APIs that can be implemented on any … [Read more...]

April 22, 2016 8:12 pm By Travis Leave a Comment

Strong Ciphers for Apache, NGINX and Lighttpd

The below strong ciphers are copy/pastable for your Apache, NGINX, Lighttpd, haproxy, Postfix, Exim, ProFTPd, Dovecot, Hitch TLS Proxy, Zarafa, MySQL, DirectAdmin, PostgreSQL, OpenSSH Server/Client, Golang Server and UniFi Controller config mirrored directly from https://cipherli.st. They provide strong SSL security for all modern browsers, and you'll obtain an A+ on the SSL Labs Test. In short, they: Set a strong Forward Secrecy enabled cipher suite Disable SSLv2 and SSLv3 Add HTTP … [Read more...]

January 23, 2015 9:48 am By Travis Leave a Comment

Disable SSL 3.0 in Windows Server

Vulnerability in SSL 3.0 Could Allow Information Disclosure The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the "POODLE" issue. The vulnerability, which is more formally known as CVE-2014-0160, allows an attacker to read up to 64 kilobytes of memory per attack on any connected client or server. Heartbleed got its name … [Read more...]

January 21, 2015 1:55 pm By Travis 2 Comments

Report IIS Server Traffic

After spending significant time Googling for an easy way to report IIS traffic on a per server basis and coming up empty handed I have decided to write my own Powershell script that will report web traffic server-wide, site-wide, chart images and automatically email it. The real magic behind it is Microsoft's Log Parser. The query I have configured for mine is to count all the hits on aspx pages to give me the most accurate report. If you use anything else, you can add in an OR clause or replace … [Read more...]

August 17, 2014 12:30 am By Travis Leave a Comment

Outlook External Autodiscover Certificate Error

In Outlook 2007 through Outlook 2010 all domain-joined Outlook clients would initially query Active Directory for AutoDiscover information and ultimately find a Service Connection Point (SCP) value that would point them to their nearest Client Access Server's AutoDiscover virtual directory. If that failed then they would revert to using DNS like any non-domain-joined Outlook client. Non-domain-joined Computer Lookup Order: https://company.com/autodiscover/autodiscover.xml … [Read more...]

November 14, 2012 5:10 pm By Travis Leave a Comment

EC2 AMI Sysprep IIS 7.5 SSL Certificate Error 0x80070520

Today I ran into IIS 7.5 SSL certificate binding error 0x80070520 after running sysprep to create a new bundled EC2 AMI. First I launched a Windows 2008 R2 instance from an official Amazon AMI, installed IIS and imported our wildcard SSL certificate to be used on future websites. Launched the ec2Config service and ran sysprep. Created a new AMI (image) of this instance, then launched a new instance based off this AMI. In IIS Manager, tried to edit the https binding of a site and got the … [Read more...]