Does anyone know how to create and install a self-signed secure transaction certificate for IIS6?
I'm running Windows XP Professional and need it in order to add realism the situation of a project I'm designing for a degree.
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
Thanks for that, but I already found a way of doing it - really easily in fact!
I simply browsed to Microsoft's website and downloaded the IIS Resource Kit for Windows XP and Windows 2003.
There's a selfcert utility included which allows easy creation of keys; it even installs them for you!
I'll award you the points, though, for your efforts! :)
Hi there everybody!
I had the same problem and here is what I found out.
You can download IIS 6.0 Resource Kit Tools from:
http://www.microsoft.com/d
Just create a virtual site (or use one that you already have) setting it up for SSL. Basicly, you have to set the SSL Port to 443 in the mmc that manage IIS 6.0 and then go to the Directory Security tab and enable the use of the SSL channel (I advice to require 1024 bits encryption).
At this point you if you installe the IIS 6.0 resource kit, you should have a new menu entry called IIS resources (in your start menu->Programs). You need to use a tool called: IIS Metabase Explorer. Go to LM->W3SVC and select the items on the left (especially those with big numbers) to see on the right a description of them and find your virtual site. The big number is the ID of the site (if you instead wants to use the default site the ID is always 1). At this point, suppose the site has ID=1088768498 you have to issue:
SelfSSL /N:CN=yoursite.yourdomain.
where:
/N:CN is the name of your site on the internet (or LAN)
/V: sets the number of days before the new certify expires
/S: is the ID we found
That's it the site is now operative and ready to go.
Hope this helps!
ACL
FYI: some additional info
Accordingly, SelfSSL supposedly only works for Win XP and 2003. Is that true?
Anyhow, if that's true, then for Win 2000, there may be another similar alternative though I haven't tested it out myself. Took a bit of searching though.
For win 2000 you'd want SSL Diagnostics from MS.
Get it at
http://www.microsoft.com/d
info about how to use it at
http://www.microsoft.com/t
Is it true that with SelfSSL you can only create one self signed cert per web server? This seems to be the case with our webserver. I created six cert's and only the last one that was created would work. Does anyone know how to get around this to create self signed certificates for multiple SSL sites on one web server?
Jacques
Business Accounts
Answer for Membership
by: af500Posted on 2003-11-24 at 14:35:35ID: 9814269
This says for IIS 5.0, but it works for IIS 6.0 as well.
Grab a copy of openssl
Then:
1. Go into IIS - Secured Directory - Server Certificate and request a certificate for your domain. This gives you c:\certreq.txt.
2. Go into mmc.exe and under REQUESTS export the request including private key as
PKCS12. Take off strong encryption. Enter a passphrase twice. This will create c:\yourfile.pfx
3. Run openssl against yourfile.pfx:
openssl pkcs12 -info -in yourfile.pfx -nodes
This will give you your private key, cut n paste it into a new file priv.txt
openssl req -x509 -key priv.txt -in certreq.txt > cert.txt
4. Go back into IIS and finish off the cert request using cert.txt. Turn on
port 443 for the site...