Hello,
I've been struggling with this for couple of days now. All I want to do is
to enable SSL protocol on the webserver.
I want to be able to generate and sign my own certificates. I used various
tools to do that, such as makecert.exe from .NET SDK and even downloaded
OpenSSL and generated certificates using that.
I installed my own certificates on IIS, but SSL simply wont work with any of
mine certificates. I get an error in server's event log: "SSL server
credential's certificate does not have a private key".
If anyone successfully accomplished what I am trying to do, Please respond.
Any links or suggestions? Please help!
Thank you
8  6452 
Lenn,
If you are going to generate your own certificates, then I believe you
have to install the certificate on the client machine to get SSL to work.
Have you tried that?
Hope this helps.
--
- Nicholas Paldino [.NET/C# MVP]
- mv*@spam.guard. caspershouse.co m
"Lenn" <Le**@discussio ns.microsoft.co m> wrote in message
news:7D******** *************** ***********@mic rosoft.com... Hello,
I've been struggling with this for couple of days now. All I want to do is
to enable SSL protocol on the webserver.
I want to be able to generate and sign my own certificates. I used various
tools to do that, such as makecert.exe from .NET SDK and even downloaded
OpenSSL and generated certificates using that.
I installed my own certificates on IIS, but SSL simply wont work with any
of
mine certificates. I get an error in server's event log: "SSL server
credential's certificate does not have a private key".
If anyone successfully accomplished what I am trying to do, Please
respond.
Any links or suggestions? Please help!
Thank you
Lenn,
If you are going to generate your own certificates, then I believe you
have to install the certificate on the client machine to get SSL to work.
Have you tried that?
Hope this helps.
--
- Nicholas Paldino [.NET/C# MVP]
- mv*@spam.guard. caspershouse.co m
"Lenn" <Le**@discussio ns.microsoft.co m> wrote in message
news:7D******** *************** ***********@mic rosoft.com... Hello,
I've been struggling with this for couple of days now. All I want to do is
to enable SSL protocol on the webserver.
I want to be able to generate and sign my own certificates. I used various
tools to do that, such as makecert.exe from .NET SDK and even downloaded
OpenSSL and generated certificates using that.
I installed my own certificates on IIS, but SSL simply wont work with any
of
mine certificates. I get an error in server's event log: "SSL server
credential's certificate does not have a private key".
If anyone successfully accomplished what I am trying to do, Please
respond.
Any links or suggestions? Please help!
Thank you
Lenn wrote: I've been struggling with this for couple of days now. All I want to
do is to enable SSL protocol on the webserver.
I want to be able to generate and sign my own certificates. I used
various tools to do that, such as makecert.exe from .NET SDK and even
downloaded OpenSSL and generated certificates using that.
I installed my own certificates on IIS, but SSL simply wont work with
any of mine certificates. I get an error in server's event log: "SSL
server credential's certificate does not have a private key".
If anyone successfully accomplished what I am trying to do, Please
respond. Any links or suggestions? Please help!
Hello,
It sounds like you're installing the cert without creating / importing the
private key in IIS. Have you followed the CSR wizard in IIS to generate a
key pair and the CSR to either send to a CA or sign yourself? Make sure you
use the 'Create a new certificate' option in the SSL IIS wizard and you can
create a test 3 month cert from IPSCA to make sure it works OK: http://certs.ipsca.com/
Lenn wrote: I've been struggling with this for couple of days now. All I want to
do is to enable SSL protocol on the webserver.
I want to be able to generate and sign my own certificates. I used
various tools to do that, such as makecert.exe from .NET SDK and even
downloaded OpenSSL and generated certificates using that.
I installed my own certificates on IIS, but SSL simply wont work with
any of mine certificates. I get an error in server's event log: "SSL
server credential's certificate does not have a private key".
If anyone successfully accomplished what I am trying to do, Please
respond. Any links or suggestions? Please help!
Hello,
It sounds like you're installing the cert without creating / importing the
private key in IIS. Have you followed the CSR wizard in IIS to generate a
key pair and the CSR to either send to a CA or sign yourself? Make sure you
use the 'Create a new certificate' option in the SSL IIS wizard and you can
create a test 3 month cert from IPSCA to make sure it works OK: http://certs.ipsca.com/
Thank you all.
Yes, I installed certificate on the client and server, doesn't make a
difference.
Leon, Wizard in IIS offers 2 options; 1. Create Certificate request to be
processed by CA. 2. Assign excisting cert.
I chose option 2.
What I've done is 1. Generate new cert using makecert.exe, 2. Import cert to
the server Cert Personal Store through Certificate Mangment Console. 3.
Install new cert on IIS though their wizard.
Have you done this before, could you please list steps you followed.
Thank you all.
Yes, I installed certificate on the client and server, doesn't make a
difference.
Leon, Wizard in IIS offers 2 options; 1. Create Certificate request to be
processed by CA. 2. Assign excisting cert.
I chose option 2.
What I've done is 1. Generate new cert using makecert.exe, 2. Import cert to
the server Cert Personal Store through Certificate Mangment Console. 3.
Install new cert on IIS though their wizard.
Have you done this before, could you please list steps you followed.
Lenn wrote: Leon, Wizard in IIS offers 2 options; 1. Create Certificate request
to be processed by CA. 2. Assign excisting cert.
I chose option 2.
What I've done is 1. Generate new cert using makecert.exe, 2. Import
cert to the server Cert Personal Store through Certificate Mangment
Console. 3. Install new cert on IIS though their wizard.
Have you done this before, could you please list steps you followed.
I usually get IIS to create a new cert and a CSR and then send the CSR to
either a certification authority or use Microsoft Certificate Services to
sign the request and then process the cert.
See http://support.microsoft.com/kb/299525/EN-US/ for details about using
certificate services to sign your own cert, or use a CA that will sign a
test cert for you for free, such as IPSCA (as mentioned before) or Thawte: http://www.thawte.com/ucgi/gothawte....00158767049000
Thanks. I usually get IIS to create a new cert and a CSR and then send the CSR to
either a certification authority or use Microsoft Certificate Services to
sign the request and then process the cert.
This links explains in details how to do the same with openSSL, so you can
be your own CA which exactly what I wanted to do.
http://www.dylanbeattie.net/docs/ope...ssl_howto.html
It worked for me, now I need to figure how to programaticlly pass client
certificate to the server.
"Leon Mayne [MVP]" wrote:
Lenn wrote: Leon, Wizard in IIS offers 2 options; 1. Create Certificate request
to be processed by CA. 2. Assign excisting cert.
I chose option 2.
What I've done is 1. Generate new cert using makecert.exe, 2. Import
cert to the server Cert Personal Store through Certificate Mangment
Console. 3. Install new cert on IIS though their wizard.
Have you done this before, could you please list steps you followed.
I usually get IIS to create a new cert and a CSR and then send the CSR to
either a certification authority or use Microsoft Certificate Services to
sign the request and then process the cert.
See http://support.microsoft.com/kb/299525/EN-US/ for details about using
certificate services to sign your own cert, or use a CA that will sign a
test cert for you for free, such as IPSCA (as mentioned before) or Thawte:
http://www.thawte.com/ucgi/gothawte....00158767049000
This thread has been closed and replies have been disabled. Please start a new discussion. Similar topics | |
by: User1001 |
last post by:
I have been trying to enable/use specific OpenSSL extensions that I use in
generating certificates manually, via PHP5 + php5-openssl
module/extension.
Filling out the "configargs" array with 'x509_extensions' and/or
'req_extensions' fails to generate/sign a certificate with the desired
X.509 extensions included in the signed certificate. The extensions in my
"openssl.cnf" file work just fine with manual OpenSSL commands.
Also, I am...
|
by: Hallvard B Furuseth |
last post by:
Does anyone know how I check the server certificate with M2Crypto?
Currently a program I have inherited does this:
#!/local/bin/python2.2
import xmlrpclib
from M2Crypto.m2xmlrpclib import Server, SSL_Transport
svr = Server('http://my.machine.no:8000',
SSL_Transport(), encoding='iso8859-1')
# TODO: check server certificate
secret = svr.login('myuser', 'mypassword')
|
by: Krzysztof Pa¼ |
last post by:
Hi,
I want to make simple client in phyton, which would be able to communicate
with Java server using SSL sockets.
There is the Java clients, which is doing this - so I'm pretty sure, that
Java server works OK.
I've heard, that P2.3 has SSL support included in himself and also, I was
trying P2.2 with pyOpenSSL wrappers and extensions, but unsuccesfuly...
So, could you give me a few lines of python code which makes such things:
|
by: Marc Poulhiès |
last post by:
Hi,
I'm trying to build a system using HTTPS with python clients that have
to verify the server's identity. From the Python document, it seems that
the server's certificate is not veryfied, and authentication can only be
in the other way (client authentication).
I know usually users only click on 'yes I trust this certificate', but
what if you really care (this is my case)?
I tried to see if the M2Crypto has this possibility, but from...
|
by: Mike Malter |
last post by:
I am having problems using https when calling a page on my local machine. I am running XP professional. All I get is a general
error page telling me there are problems with my page.
I have installed a certificate from our domain CA on the single web site allowed in IIS 5.1. I've successfully installed certs on
our qa and prod sites from our domain CA too. Everything works fine on both of those sites (yes, I am using a non trusted domain...
| | |
by: TJS |
last post by:
..net framework allows for creation of test certificate with makecert.exe,
but I cannot find any instructions on how to install certificate for test
use on development sites in IIS 5.1
anyone know where instructions exist ?
|
by: Lenn |
last post by:
Hello,
I've been struggling with this for couple of days now. All I want to do is
to enable SSL protocol on the webserver.
I want to be able to generate and sign my own certificates. I used various
tools to do that, such as makecert.exe from .NET SDK and even downloaded
OpenSSL and generated certificates using that.
I installed my own certificates on IIS, but SSL simply wont work with any of
mine certificates. I get an error in server's...
|
by: jens Jensen |
last post by:
Hello,
I was given the task to build a .Net client that will talk to IBM
integration server via HTTP post.
The idea is that each http packet exchange should be authenticated via X09
"client authentication and not "server authentification"
The code i wrote is quite straight forward. (See listing below)
With server authentication, the server's application will contain a
certificate created specifically for that server. The client...
|
by: Gordon |
last post by:
I want to use my new Macbook Pro as a development platform for work,
so I went looking for info on installing Apache, PHP, Postgres, etc on
Leopard. I discovered in my search that Apache and PHP are already
installed by default, but disabled, so I'd just have to enable the
already-installed versions.
Getting Apache up and running was no problem. You just check "enable
web sharing" in the Sharing control panel and away you go. getting...
|
by: marktang |
last post by:
ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However, people are often confused as to whether an ONU can Work As a Router. In this blog post, we’ll explore What is ONU, What Is Router, ONU & Router’s main usage, and What is the difference between ONU and Router. Let’s take a closer look !
Part I. Meaning of...
|
by: Hystou |
last post by:
Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can effortlessly switch the default language on Windows 10 without reinstalling. I'll walk you through it.
First, let's disable language synchronization. With a Microsoft account, language settings sync across devices. To prevent any complications,...
| | |
by: Hystou |
last post by:
Overview:
Windows 11 and 10 have less user interface control over operating system update behaviour than previous versions of Windows. In Windows 11 and 10, there is no way to turn off the Windows Update option using the Control Panel or Settings app; it automatically checks for updates and installs any it finds, whether you like it or not. For most users, this new feature is actually very convenient. If you want to control the update process,...
|
by: tracyyun |
last post by:
Dear forum friends,
With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each protocol has its own unique characteristics and advantages, but as a user who is planning to build a smart home system, I am a bit confused by the choice of these technologies. I'm particularly interested in Zigbee because I've heard it does some...
|
by: agi2029 |
last post by:
Let's talk about the concept of autonomous AI software engineers and no-code agents. These AIs are designed to manage the entire lifecycle of a software development project—planning, coding, testing, and deployment—without human intervention. Imagine an AI that can take a project description, break it down, write the code, debug it, and then launch it, all on its own....
Now, this would greatly impact the work of software developers. The idea...
|
by: isladogs |
last post by:
The next Access Europe User Group meeting will be on Wednesday 1 May 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM).
In this session, we are pleased to welcome a new presenter, Adolph Dupré who will be discussing some powerful techniques for using class modules.
He will explain when you may want to use classes instead of User Defined Types (UDT). For example, to manage the data in unbound forms.
Adolph will...
|
by: TSSRALBI |
last post by:
Hello
I'm a network technician in training and I need your help.
I am currently learning how to create and manage the different types of VPNs and I have a question about LAN-to-LAN VPNs.
The last exercise I practiced was to create a LAN-to-LAN VPN between two Pfsense firewalls, by using IPSEC protocols.
I succeeded, with both firewalls in the same network. But I'm wondering if it's possible to do the same thing, with 2 Pfsense firewalls...
|
by: muto222 |
last post by:
How can i add a mobile payment intergratation into php mysql website.
| | |
by: bsmnconsultancy |
last post by:
In today's digital era, a well-designed website is crucial for businesses looking to succeed. Whether you're a small business owner or a large corporation in Toronto, having a strong online presence can significantly impact your brand's success. BSMN Consultancy, a leader in Website Development in Toronto offers valuable insights into creating effective websites that not only look great but also perform exceptionally well. In this comprehensive...
| |
