locked
Clients can't access their accounts any longer using OWA RRS feed

  • Question

  • Hi,

    I did an upgrade of the ssl certificate for our owa access last night and since then it is not possible to access OWA or use Activesync.

    I have checked the certificate and it all looks OK (it is from InstantSSL and I have used them before)

    If I login on the Exchange server and access OWA it all works fine but as soon as I try from an external computer, it will not work.


    I have done a test using www.testexchangeconnectivity.com and the result is a below:


    Testing RPC/HTTP connectivity.
         The RPC/HTTP test failed.
       
        Test Steps
       
        Attempting to resolve the host name mail.bindexis.com in DNS.
         The host name resolved successfully.
       
        Additional Details
         IP addresses returned: 94.228.33.189
        Testing TCP port 443 on host mail.bindexis.com to ensure it's listening and open.
         The port was opened successfully.
        Testing the SSL certificate to make sure it's valid.
         The SSL certificate failed one or more certificate validation checks.
          Tell me more about this issue and how to resolve it
       
        Additional Details
         A network error occurred while communicating with the remote host.
    Exception details:
    Message: Authentication failed because the remote party has closed the transport stream.
    Type: System.IO.IOException
    Stack trace:
    at System.Net.Security.SslState.StartReadFrame(Byte[] buffer, Int32 readBytes, AsyncProtocolRequest asyncRequest)
    at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
    at System.Net.Security.SslState.ForceAuthentication(Boolean receiveFirst, Byte[] buffer, AsyncProtocolRequest asyncRequest)
    at System.Net.Security.SslState.ProcessAuthentication(LazyAsyncResult lazyResult)
    at System.Net.Security.SslStream.AuthenticateAsClient(String targetHost)
    at Microsoft.Exchange.Tools.ExRca.Tests.SSLCertificateTest.PerformTestReally()



    Microsoft Windows Server 2003 R2
    Standard X64 edition
    Service pack 2


    Exchange 2007
    Edition             : Standard
    AdminDisplayVersion : Version 8.1 (Build 240.6)

    Any ideas?

    Karl

    Friday, March 11, 2011 3:46 PM

All replies

  • If you open the IIS and check the bindings is it listening on 443? Check the advanced tab as well.


    James Chong MCITP | EA | EMA; MCSE | M+, S+ Security+, Project+, ITIL msexchangetips.blogspot.com
    Friday, March 11, 2011 7:30 PM
  • Hi Karl,

     

    Any updates on this issue?

     

    Please follow James suggestion to check on the IIS.

     

    Here is a related document for you, hope it help:

     

    A Network Error Occurred while Communicating with Remote Host

    http://64.4.11.252/en-us/library/dd439386(EXCHG.80).aspx

     

    Thanks,

     

    Evan


    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    Tuesday, March 15, 2011 3:43 PM