The Merge Agent could not connect to the URL during Web synchronization

[danmbuen]

This error when I try to syncrhonize using Windows Sync Manger:

The Merge Agent could not connect to the URL https://mywebserver/Sync_Test/replisapi.dll' during Web synchronization. Please verify that the URL, Internet login credentials and proxy server settings are correct and that the Web server is reachable.

I tried accessing the dll on a browser and it shows a 'Security Alert' saying that

"The security certificate was issued by a company you have not chosen to trust. View the certificate to determine whether you want to trust the certifying authority."

I just proceeded with the alert and then a login window appears and I provided username/password credentials and the dll shows successfully. I think it has something to do with the certificate I used but I do no what...

I installed Windows Server 2003 CA then made a request using IIS > Default WebSite > Properties > Directory Security > Server Certificate > Complete the request wizard.

I submit the new request using Administrative Tools > Certification Authority > CA Server > All Tasks > Submit new request

I issued the pending request using Administrative Tools > Certification Authority > Pending Requests > All Tasks > Issue.

I checked on the Issued Certificates and it is there. I returned to IIS > Default WebSite > Properties > Directory Security > Server Certificate > Process the pending request and install certificate > Finish the wizard.

Here's the setup:
Publisher/Distributor - Windows Server 2003 SP1, IIS 6.0, SQL Server 2005 Enterprise, Stand-Alone CA
Subscriber - XP SP2, SQL Server 2005 Express

Any tip is very much appreciated.. Thanks!

[Hack]

Who was the security certificate issued by and have they been established as a trusted entity?

[danmbuen]

Hi Hack thanks for your time!

Did you mean 'Trusted Root Certification Authorities' when you said as a trusted entity? I checked on the certificate properties under 'Details' tab that the 'Issued by:' has a value equal to the web server/publication's internet address-'myserver.dyndns.biz'

I also noticed the certificate has only 1 value in 'This certificate is intended for the following purpose(s):' section of the Certificate information which is
'Ensures the identity of a remote computer'. I checked a colleague's working certificate and his has another value - 'All issuance policies'. Maybe that is the reason why I still get a security error...

I really do appreciate your time and effort.. Thanks man!

[Hack]

I checked a colleague's working certificate and his has another value - 'All issuance policies'. Maybe that is the reason why I still get a security error...

Yep, and that is what the error message was trying to say.

Can you mirror what your colleague did?

[danmbuen]

Unfortunately he was not able to document the whole process.

I read some resources and there is another way to request a certificate after installing a stand-alone CA which is browsing the url http://localhost/CertSrv. Have you tried this one and what is the difference between this procedure and requesting using 'IIS > Default WebSite > Properties > Directory Security > Server Certificate > Complete the request wizard'?

Again thanks for your time Hack!

[Hack]

Did you actually get prevented from doing something or did you simply receive a warning about it not being a trusted certificate?

http://msdn.microsoft.com/en-us/library/ms751408.aspx

[danmbuen]

Hi Hack... I discovered that my friend had a SelfSSL certificate using IIS Resources...

I followed the steps but I ran into another mistake.. I was not able to change the validity and Common Name when I executed iisrkt60.exe. I read somewhere else that running it again may result to registry error so do you know how edit the SelfSSL properties?

Thanks again!

[Hack]

No, but I did find a couple of things that hopefully will help.

http://forums.iis.net/p/651517/651517.aspx

http://it.toolbox.com/blogs/parthas/...ecurity-i-5411

[danmbuen]

Hi Hack thanks for all the help!

I was finally able to sync may two SQL Server databases using SelfSSL...

[Hack]

Glad to hear it and thanks for letting us know.