PRB: Invalid Certificates Cause RDS Problems

Steps to Reproduce Behavior

1. Configure your Internet Information Server (IIS) Server for SSL. For instructions on how to do this, search for "Setting Up SSL on Your Server" in the IIS Help.
2. Remove the certificate authority that provided you with your valid SSL Certificate from the list of Certificate Authorities. If you are running Explorer 4.0, on the Control Panel, select Internet Options. Click the Content tab then select Authorities to find the Authority that issued your Certificate. Clear the Authority check box. Do not delete the authority. If you are using Internet Explorer 5.0, from Control Panel select Internet Options. Click the Content tab and then select Certificates. Look through the tabs for the Authority that issued your certificate. For this test you need to export that Authority and then delete that Authority from the list. You can import the Authority back in once this test is complete. If your authority is not listed, then you must obtain and install the credentials from your authority. Your Certificate Authority can provide you with documentation and on how this is done.
   
   If you want to install Microsoft Certificate Server as your Certificate Authority, please follow the instructions closely because missing one step causes errors. Pay special attention to the "Certificate Authority Certificate List Web Page."
3. Use your Web browser to view any secured Web page on your Web site. A warning message should appear stating that the Web browser cannot verify this site. You may continue by selecting Yes.
4. Create a Visual Basic program that creates an RDS connection to your Web server. You may use the following code as a template:

         Option Explicit
   
         Private Sub Form_Load()
   
         Dim DataSpace As Object
         Dim DataFactory As Object
         Dim SecuredDataFactory As Object
   
         Dim rsData As Object
   
         Set DataSpace = CreateObject("RDS.DataSpace")
   
         Set DataFactory = DataSpace.CreateObject _
             ("RDSServer.DataFactory", "http://localhost")
   
         'This should work when the client certificate is
         'installed and running.
         Set SecuredDataFactory = DataSpace.CreateObject _
             ("RDSServer.DataFactory", "https://localhost")
   
         'The DSN should have been installed by MDAC.
         'It is a DSN pointing to the Northwind database.
             Set rsData = DataFactory.Query _
             ("DSN=AdvWorks", "SELECT * FROM ORDERS")
   
         Set rsData = SecuredDataFactory.Query _
             ("DSN=AdvWorks", "SELECT * FROM ORDERS")
   
         End Sub
   					

5. Run the following program. The DataFactory query should work. The SecuredDataFactory query should not work. It should return the following error:
   Internet Client Error.
   -or-
   Internet Server Error.
6. Now add the Certificate Authority Client Certificate. If you are using Internet Explorer 4.0 and the certificate is already installed, on the Control Panelselect Internet Options. Click the Content tab and then select Authorities to locate the certificate. Make sure the certificate is selected. If you are using Internet Explorer 5.0, on the Control Panel select Internet Options. Click the Content tab and then select Certificates. You need to choose the Import function and point this to the client certificate that you exported in step #2.
   
   If the certificate is not installed, run the certificate file given to you by the certificate authority. You can do this by locating the file in Explorer. Select the file to execute it. It should install automatically. If you are using Microsoft Certificate Server as the certificate authority, you may go to the following location to install your certificate:
   http://localhost/CertSrv/CertEnroll/cacerts.htm (http://localhost/CertSrv/CertEnroll/cacerts.htm)
7. Run the program in step 4 again. The program should now execute without the error.

Back to the top