Friday, February 06, 2009

Setting up SSL on IIS6.0

While we're on the topic of SSL
1. In IIS Create Server Certificate Request
a. IIS -> Default Website -> Properties -> Directory Security -> Server Certificate -> Follow wizard to create request
2. Using a certificate authority, either your own or someone elses, submit the request, and approve it.
a. Make sure Certificate Authority service is installed
b. Admin Tools -> Certificate Authority -> Right Click -> All Tasks -> Submit New Request
c. Use request created in 1.
d. Goto Pending Requst folder and approve
3. Download the certificate
a. In Issued Certificate, Right Click on Cert -> All Task -> Export
b. Be sure to rename in .cer extension
4. In IIS again, assign the certificate.
a. Same steps as in 1. but assign instead of create when following wizard

If it's not from Verisign or some other "trusted" authority you'll get the "not trusted authority" pop-up error, etc, but at least the connection is still https. Decent for development purposes.

.NET has makecert.exe which allows you to make a cert for development, I haven't tried that yet. Same with the latest version of IIS 7.1 or so, has a make cert function.

No comments: