hello all..

i want ask about ssl for making https..

i am confused about this url http://support.microsoft.com/?id=298805

the first thing to do is get certificate from  the third-party CA.

but, after i fill data in certificate and save the sertificate.txt, it told to send that to your certification authority.

where can i send it? i don't understand about  your certification authority.

is there we can make hhtps in website local without install certificate ssl?

thx... 

Hi,

A certificate authority is a third party company that issues certificates. There is no way to have secure connections without the certificate. For testing purposes you may try to generate a certificate by yourself and install it on your local IIS server. There is a tool able to generate this certificate, it is called OpenSSL. A description of how you should generate the certificate you may find here:

http://www.dylanbeattie.net/docs/openssl_iis_ssl_howto.html

OpenSSL Win32 binary are available here:

http://www.slproweb.com/products/Win32OpenSSL.html

I hope this will help.

Cheers,

Florin

thx florin..

but at step one is can not work

Set up a Certificate Authority (CA)

1. First, we create a 1024-bit private key to use when creating our CA.:

   C:\ssl>openssl genrsa -des3 -out keys/ca.key 1024
   Loading 'screen' into random state - done
   warning, not much extra random data, consider using the -rand option
   Generating RSA private key, 1024 bit long modulus
   ...........++++++
   ..................++++++
   e is 65537 (0x10001)
   Enter PEM pass phrase:  - choose a memorable pass phrase to use for this key
   Verifying password - Enter PEM pass phrase:  - type your pass phrase again for verification
   

   The pass phrase will be requested whenever you use this certificate for anything, so make sure you remember it. This will create a file called c:\ssl\keys\ca.key, containing our certificate authority private key.

it seems the openssl genrsa -des3 -out keys/ca.key 1024 can not detect..

i have download openssl and put in folder ssl..

but it can not detect it..

what should i do?

thx... 

Open a command prompt and switch the current directory to your OpenSSL\Bin folder. Your prompt should look like c:\OpenSSL\bin. Now you should have access to openssl.exe. Alternately, you my add c:\OpenSSL\bin (this is the default installation, adjust this path according to your own installation folder) to your PATH local variable from control panel / system / advanced / environment variables / user variables .

your step is from Install and configure the OpenSSL toolkit (1-7step),  i have made it, it can work.. but at second  Set up a Certificate Authority (CA), 

has 1-3 step, step 1 can not work.. i am don't know the problem.. openssl.conf in c:/ssl/  is not match with this:

openssl genrsa -des3 -out keys/ca.key 1024

what should i do?

thx... 

 sory about yesterday..

i think after install openssl, then create new folder is ssl.

after i read from u url carefully,  he  change the openssl  be ssl...

now, i can  create and install certificate in default website...  in default  website, i put  my project is name Ta.

if i run my project in IE, all page in my project use https...

but i want only use https is some page like pay.aspx and login.aspx..

where should i setting?

thx...
 

To control which files (not) require SSL: Open IIS manager, expanding the website, right click the page file / application folder / virtual folder and then select ?Properties?. In the ?File Security? / "Directory Security" tab, click the ?Edit? button which under the ?View Certificate?? button. You will find an option: ?Require secure channel (SSL)?.

 i have make like u command..

but all page can use http or https...

i don't understand..

can u give more detail?

in iis have virtual folder, i click view sertificate in directory security, after that i choose detail tab, and click edit property, and choose disable all purpose for this certificate.. and ok.

after that, i click edit in under view certificate.. i am not checklist anything.

then in pay.aspx, i clikc view certificate, choose enable all purpose for this certificate.. then in edit, i checklist require secure channel and require 128 encryption.

after that i run default.page. it can use http and can not use https. then i run to pay.aspx, it use https. then i click default.aspx, it use https and can http too..
 is there something wrong with my setting in iis?

pls.. thx...

I'm to a guru in IIS management. I guess you can say only that a page requires a secure channel (like for your login.aspx or pay.aspx) but I'm not sure that you can say don't allow https on other pages. Maybe I'm wrong. Anyway, it doesn't make to much sense to say 'disable secure channel for certain pages'. I think in the end is a matter how you navigate through your pages using secure / unsecure channel. And when you were in login page you need to make sure that you redirect to http://  or to a https:// based on your requirements. See this thread for a similar discussion: http://forums.asp.net/t/1195905.aspx

so the https must be appear when we click link url from http to https...

i have see your link thread, there is write use code at every page:

If Request.IsSecureConnection Then

Response.Redirect(Request.Url.AbsoluteUri.Replace("https://", "http://"))

End If

i have try it, it can work...

thx very much florin...

have a nice day.... 

This is it. You're welcome.

Cheers,

Florin