For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Gurdip_Sira_175's avatar
Gurdip_Sira_175
Icon for Nimbostratus rankNimbostratus
Oct 23, 2015

SharePoint 2013 SP1 can't index hostnamed site collections with SSL offloading

Hi All

 

I am running SP2013 SP1 and provisioned two HNSCs which are using SSL (SSL is offloaded onto our F5 load balancer with wild card certs, so no certs whatsoever on the SharePoint servers). No SSL warnings when browsing to the site collections.

 

However, I am not able to index content from the HNSCs when performing a crawl. I get errors (can't remember now, as away from the network). The web application is http and there is a root, empty site collection. The crawl account also has full read rights on the web app.

 

Is there anything more to do?

 

Content source - http://sharepointsite.domain.com

 

My site to crawl is http on the default zone, but extended to https via set-spsiteurl, to the "Custom" zone.

 

The web application is http but redirects to https via F5, but is not extended. It is on port 80 with no host header set.

 

The current error is:

 

An unrecognized HTTP response was received when attempting to crawl this item. Verify whether the item can be accessed using your browser. ( SearchID = E49FD74D-8550-41E6-81EF-78575EB97917 ) I have set the backconnectionhostnames on all servers to the F5 VIP and the site collection URL. Loopback check disabled. I can browse to the site locally from the servers themselves.

 

The cert is valid and I get no warnings for SSL so everything seems good?

 

I basically followed this guide - http://kjellsj.blogspot.co.uk/2014/05/sp2013-hnsc-ssl-termination-bigip.html

 

Thanks

 

No RepliesBe the first to reply