| Using MS Certificate Server To Create SSL
By 15 Seconds Discussion List | Rating: 3.5 out of 5
Rate this article |
email this article to a colleague
suggest an article| Charlie Asks: I have heard that Win2000 Certificate Server can create a certificate which
can be used in IIS like a Verisign certificate in order to create SSL
sessions. I have spent 8 hours reading through the documentation and can't
tell if it is true. Has anyone here done this or know of a resource where I could find out how
to do it? Just want to have https availalbe on the Web server and wanted to
try the Microsoft solution if it works. I created a request file in IIS but can't see anyway for Certificate Server
to recognise it. Any help would be appreciated! Thanks! Neil Chimes in With: Yes, Certificate Server will do what you ask. It's pretty straightforward
really. Just create your request file on the server for which you want the
certificate. Then run Certificate Server, either on the same box or
another, it doesn't matter. Certificate Server will ask for the certificate
request file and then spit out a certificate. Take the certificate and
install it on the targeted server. Voila! It's not good for production, only in that you'd have to establish the
certificate server on the Web (or on your intranet if you're just developing
an intranet app), so that clients could verify the authenticity of the
server certificate. Of course, since you are the user and the issuer of the
certificate that doesn't really mean much. I'll assume you know all about
PKI and I'll just shut up now :)
Arnold Concludes: See Microsoft's How to Configure Certificate Server for Use with SSL on IIS. Yes, CS will do that. But there's more; Browsers come pre-configured with a
list of CAs, and if you're using one of them (like VeriSign), then your
users won't be annoyed by an "is it OK" challenge. With yours, they will. A minor point, but its acceptability to your clients will depend on the kind
of relationship you have with them. The charge for a 3rd-party Cert is far less that the cost of the hours
you've put in so far, I'll guess. Consider the bigger pic. This conversation string was taken from the 15Seconds ASP Listserv on 1/29/01. If you have an ASP-related question or would like to share some of your knowledge with others, you may join the list by clicking here.
|
| | | Supporting Products/Tools | | AspEncrypt | | Built around the Microsoft CryptoAPI, AspEncrypt helps you harness all major encryption and hashing algorithms such as DES, Triple-DES, RC2, RC4, RSA, MD5 and SHA1 in just a few lines of code. The component can be used in tandem with AspEmail to send encrypted and signed mail in the industry-standard S/MIME format, or with AspUpload to encrypt files as they are being uploaded. AspEncrypt can also be used to issue and manage X.509 digital certificates. |
[Top] |
| | AspPDF | | AspPDF is an ASP/ASP.NET component which enables generation and management of documents in PDF format. Features include advanced text formatting, font embedding, form fill-in, images, tables, content and page extraction, document stitching, encryption, digital signatures, and more. |
[Top] |
|
| | Other Articles | | Feb 3, 2005 - ASP.NET Mixed Mode Authentication | | In many web applications it is desirable for both intranet users and external parties to be able to seamlessly log onto the system. The problem this raises is that it is not easy to allow intranet users to log in via Windows integrated authentication while also allowing external parties to log in to the same application using standard forms authentication. This article will show you one way to achieve the best of both worlds when it comes to authentication.
[Read This Article] [Top] |
| | | | | | Feb 2, 2004 - Fighting Spambots with .NET and AI | | Bill Gates, in a recent interview, predicted the end of spam by 2006. One of the methods he mentioned involved a challenge only a real live person could handle. Adnan Masood shows how to use AI and .NET to create a user verification scheme that incorporates similar concepts Gates alluded to.
[Read This Article] [Top] |
| | | | |
| Mailing List
Want to receive email when the next article is published? Just Click Here to sign up. |
|
