Hello all,
My Contractor, SSL Manager, and I have struggled for a month to provision the App Store and an application site with SSL certs and we are completely baffled. We created the App Store (or Catalog??) and gave it a forward looking zone, then we got a wild card cert with two alternative subject names. No matter what we do the application site throws a cert mismatch warning when trying to reach it with a browser. Our SSL Cert manager maintains that there is only one connection allowed to port 433 per box. The Consultant has said they have seen this port provisioned several times on other client sites. The ssl cert manager wants to put the App site as a subdomain of the App store. I’m sure that will alleviate the cert warning but don’t think this is the way it’s supposed to be. Can someone explain the very confusing situation with the App Store and it’s relation to an application site and how the SSL certs need to be provisioned???
It appear this nondescript check box with a confusing label in IIS is the culprit. Checking it solved the issue:
this was not documented clearly in MS Technet
Thanks Vlad,
This is what we have done, but why does an alternate name for the target Application site (SharePoint Site) get the cert mismatch warning no matter what we do?
Yo uneed a WiLcard cart on the APP Domasin. So if your appdomain is vlad-apps.com , you will need to get *.vlad-apps.com as certificate.
You then need to create a no-host header Web Application, and in IIS, add that Wildcart cert to the No-hostheader |Web App (in IIS ofc) you created.
