SSL Configuration

[aehlert]

Is there a document available that discusses how to setup Vault under SSL?

We were able to get the client software to connect when we turned SSL on, however, when we tried to access the web site, it did not work.

[Beth]

The SSL setting in Vault uses certificates that are bound to IIS. You can either purchase a certificate from a third party (Verisign, Digicert, many others), and they will provide instructions on how to set it up with IIS, or you can create your own Certificate Authority Server in your network and create your own certificates.

Here is an example of instructions for installing a certificate: https://www.godaddy.com/help/iis-7-inst ... icate-4801.

[aehlert]

We understand how to setup the certificates.

When we require that the site operates under SSL, and try to hit the site as https://somesourcegear.com, it redirects to the regular HTTP site and gives a 403 error.

Do we have to modify the web.configs of the sourcegear sites to get this to work correctly?

The client tools are fine with the HTTPS configuration. If we select, "use ssl" from visual studio, it gets the code just fine.

[Beth]

Are you using host headers?

Does what you enter into Vault exactly match somesourcegear.com?

The usual Vault url with SSL looks like https://<your Vault server>/vaultservice/vaultweb.

Are you getting to a login page and then it reroutes, or are you not able to reach the login page at all?

Unless you have some redirection going on https://somesourcegear.com should only return IIS. This isn't something configured in Vault. The first place to check is the bindings in IIS.

What happens if you try https://somesourcegear.com/vaultservice/vaultweb?