The SSL Diagnostics tool is a very useful tool for troubleshooting SSL issues. It generates a detailed report of SSL settings for all the websites on an IIS server which helps in quickly identifying SSL issues.
But the tool was built for IIS 5 and 6, there is no version available which is compatible with IIS 7. The SSL Diagnostics tool does succeed in generating a report on IIS 7 if the IIS 6.0 Metabase Compatibility feature is installed.
To help troubleshoot SSL issues on IIS 7 I have written a tool which works in a similar fashion. It scans all the websites and FTPS sites configured on the server and generates a report which can help in identifying SSL issues.
If any certificate has issues you will get a report as follows.
Generate Report – Scans all websites and FTPS sites on the local server. If a certificate association is found it will list details of the certificate. It also performs a certificate validation on the certificate. For SSL bindings it also attempts to check if a TCP connection can be established.
Simulate SSL Web Request – Right clicking on a https binding gives you this option. It generates a SSL Web request based on the selected binding and displays the response received.
Verify Store – Basically is the output of certutil –verifyStore MY. Useful in identifying certain issues with certificates.
INSTALLATION & USAGE
Attached SSLDiag.zip contains SSLDiag.exe. You do not have to install this but just run the exe. (“Run as Administrator”) You do not need the IIS 6.0 Metabase Compatibility feature to be installed. You can also save the report generated for your notes or latter analysis. Requires .NET 2.0.
Hope it helps in reducing your troubleshooting time on SSL issues.
This Is New Comments To Download This Tools
I'm having an issue with transport security and this might help. Thanks
Great tool and so on-time for me. I can use it for for www.****************.com and www.*****************.
Great tool. It helped me with something I was trying to do.
I have been trying to generate a report in all sites bindings inside our web server. This will help me with it, even if it does not exactly does that.
I think the title is contrary with the articles here.
The tools was built to run in IIS 5 & 6, but the title mentioned for IIS 7
It's ultimate application. Thanks for making engineers life easy.
Also it thrown error on Windows Server 2008 R2 Enterprise SP2, IIS 7.5 even executed with "as Administrator".
Please advise, if required fix it.
Thanks a lot again.
See the end of this message for details on invoking
just-in-time (JIT) debugging instead of this dialog box.
System.ArgumentNullException: Value cannot be null.
Parameter name: value
at System.BitConverter.ToString(Byte value)
at System.Windows.Forms.Form.OnLoad(EventArgs e)
at System.Windows.Forms.Control.CreateControl(Boolean fIgnoreVisible)
at System.Windows.Forms.Control.WmShowWindow(Message& m)
at System.Windows.Forms.Control.WndProc(Message& m)
at System.Windows.Forms.Control.ControlNativeWindow.WndProc(Message& m)
at System.Windows.Forms.NativeWindow.Callback(IntPtr hWnd, Int32 msg, IntPtr wparam, IntPtr lparam)
************** Loaded Assemblies **************
Assembly Version: 126.96.36.199
Win32 Version: 2.0.50727.5477 (Win7SP1GDR.050727-5400)
Assembly Version: 188.8.131.52
Win32 Version: 184.108.40.206
Win32 Version: 2.0.50727.5468 (Win7SP1GDR.050727-5400)
Win32 Version: 2.0.50727.5467 (Win7SP1GDR.050727-5400)
and so on ********
Does it verify the same over internet or not ?
what to do if the Server Certificate Validation Failed ?