IIS SSL error "ssl_error_rx_record_too_long"

Question

I have created a certificate using the following SSL command:

makecert -r -pe -n "CN=www.yourserver.com" -b 01/01/2000 -e 01/01/2036 -eku 1.3.6.1.5.5.7.3.1 -ss my -sr localMachine -sky exchange -sp "Microsoft RSA SChannel Cryptographic Provider" -sy 12

I assigned it to a web site on IIS, but when I try to hit the url of the web site I receive: "SSL received a record that exceeded the maximum permissible length.

(Error code: ssl_error_rx_record_too_long)" when using Firefox.

What is causing it and how to fix it?

Answer 1

This is a typical sign that the SSL port on your IIS server is actually serving plain HTTP.

Have you set the SSL port directive in IIS to 443? Perhaps if you can show your IIS config?

Also this MS support article may help you: http://support.microsoft.com/kb/324069.

NOTE - I've voted to migrate this to serverfault.com as it's system-admin related as opposed to programming-related.

Answer 2

I had this same exact problem. Beat my head on the wall for a while, restarting IIS, checking all the settings, Googling for possible answers, etc. etc. Then I did the magical cure-all for every Windows system: I restarted the system. Everything worked perfectly after that.