Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

SSL

Posted on 1999-08-02
14
Medium Priority
?
315 Views
Last Modified: 2013-11-29
How can I use SSL in IIS ? Must I need to get a certificate ?

Can I install a 128-bits encrypting algorithm to my web server if it places outside US ?

I have been to VeriSign and find "10-city site metrics" !
What is its meaning ?

Andrew
0
Comment
Question by:andrewyu
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 7
  • 7
14 Comments
 
LVL 1

Accepted Solution

by:
trumps007 earned 40 total points
ID: 1873017
You must get a certificate.  You can use a "self signed certificate" for testing purposes.  You have to use the Key Manager in IIS to request a certificate, than you send the generated request to Verisign, and then you recieve the other half which is called the "key"  This is then installed with Key MAnager.  Currently you cannot export 128 bit encryption outside of the US and puerto rico.  Note that this is directly related to your service pack's encryption strength, you need to download the 128 bit service pack.  You should check into the specifics on microsoft's site. http://www.microsoft.com/ntserver

hope this helps.  any questions, let me know.

-Jason
0
 

Author Comment

by:andrewyu
ID: 1873018
I understood !

Thank you very much !

Andrew
0
 

Author Comment

by:andrewyu
ID: 1873019
Anyway, how long can the "SELF SIGNED CERTIFICATE" be used ?

Andrew
0
Better audio for more successful meetings

Challenge: S&ME was tired of poor audio quality of Skype for Business calls in mid-sized meeting and training rooms. They were looking for a reliable and cost efficient solution to replace the existing conferencing system.

 
LVL 1

Expert Comment

by:trumps007
ID: 1873020
Well, I have yet to find out how to sign an certificate by yourself.  On one freeBSD machine I have, you can self-sign certificates with SSLEAY.  One alternative is to get a 14 day trial certificate.  It used to be 60 days for a trial, but you know how it goes.

good luck!

-Jason
0
 

Author Comment

by:andrewyu
ID: 1873021
SSLEAY can CREATE a certificate with no time limit ?

Can I get the certificate after create by the SSLEAY ?

Andrew
0
 
LVL 1

Expert Comment

by:trumps007
ID: 1873022
Yeah, you can create a certificate with no time limit, however the browser will tell the client its a phoney certificate.  It still enters 128 bit encryption.  You can simply create a new request and send it off for a real certificate afterwards.

hope that helps,

Jason
0
 

Author Comment

by:andrewyu
ID: 1873023
SSLEAY ... I cannot find it in my FreeBSD 3.2 ... Where did you get this and what is the command ?

Andrew
0
 
LVL 1

Expert Comment

by:trumps007
ID: 1873024
It was part of the Apache+SSL package.  Try ftp.sunsite.se in the distfiles dir.
0
 
LVL 1

Expert Comment

by:trumps007
ID: 1873025
Also, you need to use the CA command in order to sign the certificate.
0
 

Author Comment

by:andrewyu
ID: 1873026
What do you mean by CA command ?

Andrew
0
 
LVL 1

Expert Comment

by:trumps007
ID: 1873027
There is a utility called CA which allows you to be your own (C)ertificate (A)uthority.  That's what you use to sign the .cert file.
0
 

Author Comment

by:andrewyu
ID: 1873028
BUT, can I own a CA ?

Andrew
0
 

Author Comment

by:andrewyu
ID: 1873029
Can I use SSL without applying a certificate ?

Andrew
0
 
LVL 1

Expert Comment

by:trumps007
ID: 1873030
Yeah you can use SSL without a certificate, but it will give the client an error every time.  You can be your own CA, but the process is rather complicated.
0

Featured Post

[Video] Create a Disruption-Free Workspace

Open offices have their challenges. And Sometimes, it's even hard to work at work. It's time to reclaim your office and create a disruption-free workspace. With the MB 660, you can:

-Increase Concentration
-Improve well-being
-Boost Productivity

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article shows how to use a free utility called 'Parkdale' to easily test the performance and benchmark any Hard Drive(s) installed in your computer. We also look at RAM Disks and their speed comparisons.
The online market is growing at an unprecedented rate and retail eCommerce sales are expected to reach $4 trillion by 2020. Yet, the profit is not just there for the taking because you have to set yourself apart from the competition.
This tutorial demonstrates a quick way of adding group price to multiple Magento products.
This video explains how to create simple products associated to Magento configurable product and offers fast way of their generation with Store Manager for Magento tool.

670 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question