Hi
I have an exchange server 2013 SP1 installed consisting of 2 CAS and 2 mailbox servers, I am facing some issues with my autodiscover service.
When I assign a SSL certificate using SHA1 hashing algortihm everything works fine when i changed to a certificate with SHA2, autodiscover stops working and i am getting the output below when i run test outlook web services from powershell:
RunspaceId : f9310034-1399-4844-939b-9728c9fd619e
Source : EXH-MB01.YYY.yy
ServiceEndpoint : mail.YYY.yy
Scenario : AutoDiscoverOutlookProvider
ScenarioDescription : Autodiscover: Outlook Provider
Result : Failure
Latency : 51
Error : System.Net.WebException: The underlying connection was closed: An unexpected error occurred on a
receive. ---> System.IO.IOException: Unable to read data from the transport connection: An
existing connection was forcibly closed by the remote host. --->
System.Net.Sockets.SocketException: An existing connection was forcibly closed by the remote host
at System.Net.Sockets.NetworkStream.Read(Byte[] buffer, Int32 offset, Int32 size)
--- End of inner exception stack trace ---
at System.Net.Sockets.NetworkStream.Read(Byte[] buffer, Int32 offset, Int32 size)
at System.Net.FixedSizeReader.ReadPacket(Byte[] buffer, Int32 offset, Int32 count)
at System.Net.Security._SslStream.StartFrameHeader(Byte[] buffer, Int32 offset, Int32 count,
AsyncProtocolRequest asyncRequest)
at System.Net.Security._SslStream.StartReading(Byte[] buffer, Int32 offset, Int32 count,
AsyncProtocolRequest asyncRequest)
at System.Net.Security._SslStream.ProcessRead(Byte[] buffer, Int32 offset, Int32 count,
AsyncProtocolRequest asyncRequest)
at System.Net.TlsStream.Read(Byte[] buffer, Int32 offset, Int32 size)
at System.Net.PooledStream.Read(Byte[] buffer, Int32 offset, Int32 size)
at System.Net.Connection.SyncRead(HttpWebRequest request, Boolean userRetrievedStream,
Boolean probeRead)
--- End of inner exception stack trace ---
at System.Net.HttpWebRequest.GetResponse()
at
Microsoft.Exchange.Management.SystemConfigurationTasks.ServiceValidatorBase.InternalInvoke()
at Microsoft.Exchange.Management.SystemConfigurationTasks.ServiceValidatorBase.Invoke()
Verbose : [2014-07-18 23:05:51Z] Autodiscover connecting to
'https://mail.YYY.yy/autodiscover/autodiscover.xml'.
[2014-07-18 23:05:51Z] Test account: extest_10955431dd014@YYY.yy Password: ******
[2014-07-18 23:05:51Z] Autodiscover request:
User-Agent: EXH-MB01/Test-OutlookWebServices/extest_10955431dd014@YYY.yy
Content-Type: text/xml; charset=utf-8
Authorization: Negotiate TlRMTVNTUAABAAAAl4II4gAAAAAAAAAAAAAAAAAAAAAGAvAjAAAADw==
Host: mail.YYY.yy
Content-Length: 0
Connection: Keep-Alive
[2014-07-18 23:05:51Z] Autodiscover request:
<?xml version="1.0"?>
<Autodiscover xmlns:xsd="http://www.w3.org/2001/XMLSchema"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xmlns="http://schemas.microsoft.com/exchange/autodiscover/outlook/requestschema/2006">
<Request>
<EMailAddress>extest_10955431dd014@YYY.yy</EMailAddress>
<AcceptableResponseSchema>http://schemas.microsoft.com/exchange/autodiscover/outlook/response
schema/2006a</AcceptableResponseSchema>
</Request>
</Autodiscover>
[2014-07-18 23:05:51Z] Autodiscover response:
System.Net.WebException: The underlying connection was closed: An unexpected error occurred on a
receive. ---> System.IO.IOException: Unable to read data from the transport connection: An
existing connection was forcibly closed by the remote host. --->
System.Net.Sockets.SocketException: An existing connection was forcibly closed by the remote host
at System.Net.Sockets.NetworkStream.Read(Byte[] buffer, Int32 offset, Int32 size)
--- End of inner exception stack trace ---
at System.Net.Sockets.NetworkStream.Read(Byte[] buffer, Int32 offset, Int32 size)
at System.Net.FixedSizeReader.ReadPacket(Byte[] buffer, Int32 offset, Int32 count)
at System.Net.Security._SslStream.StartFrameHeader(Byte[] buffer, Int32 offset, Int32 count,
AsyncProtocolRequest asyncRequest)
at System.Net.Security._SslStream.StartReading(Byte[] buffer, Int32 offset, Int32 count,
AsyncProtocolRequest asyncRequest)
at System.Net.Security._SslStream.ProcessRead(Byte[] buffer, Int32 offset, Int32 count,
AsyncProtocolRequest asyncRequest)
at System.Net.TlsStream.Read(Byte[] buffer, Int32 offset, Int32 size)
at System.Net.PooledStream.Read(Byte[] buffer, Int32 offset, Int32 size)
at System.Net.Connection.SyncRead(HttpWebRequest request, Boolean userRetrievedStream,
Boolean probeRead)
--- End of inner exception stack trace ---
at System.Net.HttpWebRequest.GetResponse()
at
Microsoft.Exchange.Management.SystemConfigurationTasks.ServiceValidatorBase.InternalInvoke()
at Microsoft.Exchange.Management.SystemConfigurationTasks.ServiceValidatorBase.Invoke()
MonitoringEventId : 6001
RunspaceId : f9310034-1399-4844-939b-9728c9fd619e
Source : EXH-MB01.YYY.yy
ServiceEndpoint :
Scenario : ExchangeWebServices
ScenarioDescription : Exchange Web Services
Result : Skipped
Latency : 0
Error : Skipped testing Exchange Web Services because the Autodiscover step failed.
Verbose :
MonitoringEventId : 5002
RunspaceId : f9310034-1399-4844-939b-9728c9fd619e
Source : EXH-MB01.YYY.yy
ServiceEndpoint :
Scenario : AvailabilityService
ScenarioDescription : Availability Service
Result : Skipped
Latency : 0
Error : Skipped testing Availability Service because the Autodiscover step failed.
Verbose :
MonitoringEventId : 5003
RunspaceId : f9310034-1399-4844-939b-9728c9fd619e
Source : EXH-MB01.YYY.yy
ServiceEndpoint :
Scenario : OfflineAddressBook
ScenarioDescription : Offline Address Book
Result : Skipped
Latency : 0
Error : Skipped testing Offline Address Book because the Autodiscover step failed.
Verbose :
MonitoringEventId : 5004
I need to use SHA2 key since SHA1 will be deprecated soon
i need to know if sha2 is enabled by default on the servers ( i checked the registry and it is showing that TLS 1.2 is enabled )
I tried to change the certificate on the MBX servers as well to be sha2 but unfortunately always i am getting the same errror above.
Please note when i run connectivity analyzer test it passes using the SHA1 or SHA2 when i go to configure an account by creating new profile in mail it fails and informs that microsoft exchange is not available and make sure that outlook is online and i did more than test from windows 7 and windows 8 client outlook 2010 and outlook 2013.
Please I need some help here and thanks in advance