RE: CA-SSL in IIS

From: Larry Seltzer (larry_at_larryseltzer.com)
Date: 07/15/03

  • Next message: Anthony Kim: "Re: CA-SSL in IIS" 
    To: "'Ed Sunder'" <edsunder@threehd.com>, <focus-ms@securityfocus.com>
Date: Tue, 15 Jul 2003 12:11:23 -0400

    >>What drawbacks are there in becoming your own certificate service?

    Users may get a warning that the certificate does not come from a trusted authority.

    Larry Seltzer
    Editor
    Ziff Davis Security SuperSite
    http://security.ziffdavis.com/
    larryseltzer@ziffdavis.com

    -----Original Message-----
    From: Ed Sunder [mailto:edsunder@threehd.com]
    Sent: Tuesday, July 15, 2003 10:50 AM
    To: focus-ms@securityfocus.com
    Subject: RE: CA-SSL in IIS

    What drawbacks are there in becoming your own certificate service? Versus one of the
    major SSL services? Other than that the source of the certificate (if the user looked it
    up) would not be a commercially known provider and you couldn't participate in any of
    the major provider's ever so valuable certificate programs.

    Ed Sunder
    Three HD

    >You can easily do it using the Microsoft CA service. There
    >is plenty of documentation around on the subject.
    >
    >In short, you setup the CA service, browse to the web
    >interface and submit your CSR. Then logon to the service
    >as a user with relevant permissions, approve the request,
    >et voila, collect your certificate from the web interface.
    >
    >Regards
    >Lee
    >--
    >Lee Evans
    >Vital Online Ltd
    >
    >> -----Original Message-----
    >> From: Benjamin Meade [mailto:ben@lanwest.com.au]
    >> Sent: 15 July 2003 09:14
    >> To: focus-ms@securityfocus.com
    >> Subject: CA-SSL in IIS
    >>
    >>
    >>
    >> Hi all,
    >>
    >> I am looking into installing and SSL certificate into IIS to allow
    >> encrypted connections. Rather than pay out a few hundred dollars a
    >> year for a SSL cert, I would rather generate it myself.
    >>
    >> Can I use the CA server in Win2K server for this? Or do I need
    >> OpenSSL or something to generate the certificate?
    >>
    >> Thanks,
    >>
    >> Benjamin Meade
    >> System Administrator
    >> LanWest Pty Ltd
    >> Ph: (08) 9440 3033
    >> Fax: (08) 9440 3370
    >>
    >>
    >> --------------------------------------------------------------
    >> ---------------
    >> --------------------------------------------------------------
    >> ----------------
    >>
    >>
    >
    >
    >-----------------------------------------------------------------------
    ------
    >-----------------------------------------------------------------------
    -------

    -----------------------------------------------------------------------------
    ------------------------------------------------------------------------------

    -----------------------------------------------------------------------------
    ------------------------------------------------------------------------------

  • Next message: Anthony Kim: "Re: CA-SSL in IIS"

    Relevant Pages