ISAPI Filter to reject HTTP/1.0 requests
There is a known problem on IIS where the IP Address is leaked in the content-location header of the HTTP response. There is a fix for this and its documented...
View ArticleDo we need to install/move IIS related folders to a non-System drive?
It is not possible to install IIS on a non-system drive. Well “not possible” may be too restrictive, I would say it is not recommended or not supported to do so.At CSS we see a lot of issues relating...
View ArticleSSL/TLS Alert Protocol & the Alert Codes
There have been many occasions where a event corresponding to SChannel is logged in the System event logs which indicates a problem with the SSL/TLS handshake and many a times depicts a number. The...
View ArticleError HRESULT: 0x80070520 when adding SSL binding in IIS
Today I will be discussing the very infamous error that is seen while adding a SSL binding in IIS 7 & higher. Below is a snapshot of the error message while trying to add the SSL binding in...
View ArticleCentral Certificate Store (CCS) with IIS 8 (Windows Server 2012)
In my previous posts on IIS 8, I discussed how scalability was achieved in IIS 8 via SNI.Below are the links to previous posts: · SSL Scalability with IIS 8 ·...
View ArticleDisable Client Certificate Revocation (CRL) Check on IIS
I have been asked this question on several occasions on how to disable revocation check in IIS 7. It was pretty easy for IIS 6, on IIS 7 there is no documentation on how to do so. This post will...
View ArticleWindows Azure Web Sites : Cannot upload a Self-Signed Certificate created...
As SSL functionality was added to Windows Azure Web Sites, I started playing around with it. I was trying to upload self-signed certificates when I ran into a issue.I created a self-signed certificate...
View ArticleWindows Azure Web Sites: How to configure a custom domain
By default when users create a website on WAWS they hostname would be SITENAME.azurewebsites.net. So when I create a website called Kaushalz then the hostname would be...
View ArticleWindows Azure Web Sites: DASHBOARD Management Page
This post will address the Web Sites DASHBOARD management page. In one of my earlier posts I discussed the QuickStart management page.The DASHBOARD management page is one of the most important pages....
View ArticleSSL Handshake and HTTPS Bindings on IIS
Secure Socket Layer (SSL) also known as Transport Layer Security (TLS) is a cryptographic protocol which defines how 2 entities (client and server) communicate with each other securely. TLS is the...
View ArticleWindows Azure Web Sites: PHP, .user.ini and WAWS
Happy New Year 2014 to all the readers!! Its been quite some time I wrote a blog post. I am back and today I will be writing a small post on the importance of .user.ini file w.r.t Windows Azure Web...
View ArticleWindows Azure Web Sites: File upload limit for PHP sites hosted on WAWS
In my previous post I discussed about .user.ini file and how it is useful in WAWS. In today’s post I will address the issue of increasing the limit of the file size to a PHP site hosted on WAWS using...
View ArticleSSL Diagnostics for IIS 6 (Windows Server 2003)
SSL Diagnostics tool for Windows Server 2003 is no longer available for download on TechNet. I had to ping my peers to who had a copy of the tool which they had downloaded earlier.Main stream support...
View ArticleMicrosoft Azure Web Sites: Deploying wordpress to a virtual directory within...
Microsoft Azure Web Sites allows you to have a virtual directory created within the site. There are many advantages to this. Consider a scenario where you your org's site is deployed to root...
View ArticleWEBINAR: Developer Live Series
Developer Live is an initiative started by the "Developer Tools" Support team in Microsoft Support where we present sessions on various developer technologies like Visual Studio 2013, BizTalk Server,...
View ArticleMicrosoft Azure: Services availability by region
While Microsoft Azure continues to enhance the services it provides it is also expanding its footprint in various geographical regions. Currently Azure provides its services in 4 continents (11...
View ArticleMicrosoft Azure Web Site: Connect to your site via FTP and upload/download files
In this post I will describe on how to connect to the Azure Web Sites via FTP using FileZilla as the client. The readers are free to choose their FTP client Download publishsettings file from Azure...
View ArticlePOODLE Vulnerability: Padding Oracle on Downgraded Legacy Encryption
INTRODUCTIONPOODLE abbreviates to Padding Oracle On Downgraded Legacy Encryption. This vulnerability was discovered by Bodo Möller, Thai Duong& Krzysztof Kotowicz from the GOOGLE security team and...
View ArticleWinDBG - Modifying icons to identify 32/64 bit debuggers
This article is not very technical in nature. Its purpose is to simplify an administrative task. Sharing this in case someone finds it useful.I use WinDBG for debugging memory dumps on a daily basis....
View ArticleClient Certificate Authentication
SSL/TLS certificates are commonly used for both encryption and identification of the parties. In this blog post, I'll be describing Client Certificate Authentication in brief. Client Certificate...
View Article