Sorry if this is a re-post.
I'm running Exchange 2010 SP1. I have a .local internal namespace and a .com external namespace. I've run into the errors/warnings when internal Exchange clients see the external name on the SSL certificate, and have made the changes in DNS and in Exchange to direct clients both internally and externally to the .com external address (as opposed to the .local address). I've now been rid of just about every SSL name mismatch error I've been seeing, but when I run an Test-OutlookWebServices command, I get the following...
First I get this, as I would expect:
RunspaceId : d71e9b8e-63d9-40a3-954e-6f91678c950e
Id : 1019
Type : Information
Message : A valid Autodiscover service connection point was found. The Autodiscover URL on this object is https://mail.XXXX.com/autodiscover/autodiscover.xml.
This is followed by a slew of Successes connecting to mail.XXXX.com. The certificate has the .com name on it, and internal and external clients are directed to the .com address, so I expect this message and all subsequent successes. However, then I see this in the SAME Test-OutlookWebServices output the following...
RunspaceId : d71e9b8e-63d9-40a3-954e-6f91678c950e
Id : 1104
Type : Error
Message : The certificate for the URL https://SERVERNAME.XXXX.local/autodiscover/autodiscover.xml is incorrect. For SSL to work, the certificate needs to have a subject of SERVERNAME.XXXX.local, instead the subject found is mail.XXXX.com.
Consider correcting service discovery, or installing a correct SSL certificate.
I have followed the directions in KB940726, and in fact Get-ClientAccessServer | fl returns the following AutodiscoverServiceInternalUri:
AutoDiscoverServiceInternalUri : https://mail.XXXX.com/autodiscover/autodiscover.xml
So how do I REALLY make sure all autodiscover requests get sent to mail.XXXX.com? I'm having an issue with a spam filter, and until the Test-OutlookWebServices show 0 SSL errors they're not going to help me.
I've tried to keep this question short, hopefully I haven't left any questions you might have about my config unanswered. Just in case you might need it to help though, here is the full output of Test-OutlookWebServices...
-----------------------------------------------------------------------------------------------------
RunspaceId : 4973ab15-af8f-4910-b75f-3e04ff0f92cb
Id : 1019
Type : Information
Message : A valid Autodiscover service connection point was found. The Autodiscover URL on this object is https://mail.XXXX.com/autodiscover/autodiscover.xml.
RunspaceId : 4973ab15-af8f-4910-b75f-3e04ff0f92cb
Id : 1006
Type : Information
Message : Contacted the Autodiscover service at https://mail.XXXX.com/autodiscover/autodiscover.xml.
RunspaceId : 4973ab15-af8f-4910-b75f-3e04ff0f92cb
Id : 1016
Type : Information
Message : [SERVERNAME] The AS is configured for this user in the Autodiscover response received from https://mail.XXXX.com/autodiscover/autodiscover.xml.
RunspaceId : 4973ab15-af8f-4910-b75f-3e04ff0f92cb
Id : 1015
Type : Information
Message : [SERVERNAME] The OAB is configured for this user in the Autodiscover response received from https://mail.XXXX.com/autodiscover/autodiscover.xml.
RunspaceId : 4973ab15-af8f-4910-b75f-3e04ff0f92cb
Id : 1014
Type : Information
Message : [SERVERNAME] The UM is configured for this user in the Autodiscover response received from https://mail.XXXX.com/autodiscover/autodiscover.xml.
RunspaceId : 4973ab15-af8f-4910-b75f-3e04ff0f92cb
Id : 1022
Type : Success
Message : Autodiscover was tested successfully.
RunspaceId : 4973ab15-af8f-4910-b75f-3e04ff0f92cb
Id : 1104
Type : Error
Message : The certificate for the URL https://SERVERNAME.XXXX.local/autodiscover/autodiscover.xml is incorrect. For SSL to work, the certificate needs to have a subject of SERVERNAME.XXXX.local, instead the subject found is mail.XXXX.com.
Consider correcting service discovery, or installing a correct SSL certificate.
RunspaceId : 4973ab15-af8f-4910-b75f-3e04ff0f92cb
Id : 1106
Type : Information
Message : Contacted the Autodiscover service at https://SERVERNAME.XXXX.local:443/autodiscover/autodiscover.xml.
RunspaceId : 4973ab15-af8f-4910-b75f-3e04ff0f92cb
Id : 1116
Type : Information
Message : [SERVERNAME] The AS is configured for this user in the Autodiscover response received from https://SERVERNAME.XXXX.local:443/autodiscover/autodiscover.xml.
RunspaceId : 4973ab15-af8f-4910-b75f-3e04ff0f92cb
Id : 1115
Type : Information
Message : [SERVERNAME] The OAB is configured for this user in the Autodiscover response received from https://SERVERNAME.XXXX.local:443/autodiscover/autodiscover.xml.
RunspaceId : 4973ab15-af8f-4910-b75f-3e04ff0f92cb
Id : 1114
Type : Information
Message : [SERVERNAME] The UM is configured for this user in the Autodiscover response received from https://SERVERNAME.XXXX.local:443/autodiscover/autodiscover.xml.
RunspaceId : 4973ab15-af8f-4910-b75f-3e04ff0f92cb
Id : 1122
Type : Success
Message : Autodiscover was tested successfully.
RunspaceId : 4973ab15-af8f-4910-b75f-3e04ff0f92cb
Id : 1024
Type : Success
Message : [SERVERNAME] Successfully contacted the AS service at https://mail.XXXX.com/ews/Exchange.asmx. The elapsed time was 93 milliseconds.
RunspaceId : 4973ab15-af8f-4910-b75f-3e04ff0f92cb
Id : 1026
Type : Success
Message : [SERVERNAME] Successfully contacted the UM service at https://mail.XXXX.com/ews/Exchange.asmx. The elapsed time was 31 milliseconds.
RunspaceId : 4973ab15-af8f-4910-b75f-3e04ff0f92cb
Id : 1124
Type : Success
Message : [Server] Successfully contacted the AS service at https://SERVERNAME.XXXX.local/ews/Exchange.asmx. The elapsed time was 530 milliseconds.
RunspaceId : 4973ab15-af8f-4910-b75f-3e04ff0f92cb
Id : 1126
Type : Success
Message : [Server] Successfully contacted the UM service at https://SERVERNAME.XXXX.local/ews/Exchange.asmx. The elapsed time was 31 milliseconds.
-----------------------------------------------------------------------------------------------------
Any thoughts?
Thanks ~ k