Re: Selfssl.exe for multiple vhosts
From: pj_servadmin (pjservadmin_at_discussions.microsoft.com)
Date: 05/05/05
- Next message: jwmason1_at_gmail.com: "Re: Unable to set up client certificate, error 403.7"
- Previous message: sgm: "Re: IIS 5.0 - Create Server Certificate Wizard"
- In reply to: David Wang [Msft]: "Re: Selfssl.exe for multiple vhosts"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Thu, 5 May 2005 09:28:06 -0700
Ok, so it's a bug. Followup question: where is the private key stored, so I
can export it back to the original host?
Or better yet, should I just redo all of the selfssl'd sites and generate
the private key/self signed cert with openssl?
Thanks in advance!
"David Wang [Msft]" wrote:
> Actually, it is a bug in selfssl.exe, and you hit the bug right on the head.
>
> While we are not going to fix and/or re-release selfssl.exe in the IIS6
> Resource Kit to address this issue (long story short: it is a huge
> administrivia pain for us to re-release the IIS6 Resource Kit, make
> modifications to it, or even re-release selfssl.exe), we are planning to
> release the fix in other ways. I'll be blogging about it when it happens; if
> all goes well, it should be soon.
>
> --
> //David
> IIS
> http://blogs.msdn.com/David.Wang
> This posting is provided "AS IS" with no warranties, and confers no rights.
> //
> "Ken Schaefer" <kenREMOVE@THISadOpenStatic.com> wrote in message
> news:uGoZb0GUFHA.4056@TK2MSFTNGP15.phx.gbl...
> AFAIK (As far as I know) that is a built in limitation of SelfSSL. You
> probably want to use Microsoft Certificate Services, or OpenSSL or similar
> if you need to generate lots of certificates.
>
> Cheers
> Ken
>
> --
> Blog: www.adopenstatic.com/cs/blogs/ken/
> Web: www.adopenstatic.com
>
> "pj_servadmin" <pjservadmin@discussions.microsoft.com> wrote in message
> news:2CEF84D9-9277-4E0F-A675-3A9883758991@microsoft.com...
> :I am probably just missing one of the basic facts of ssl, but it seems that
> : selfssl.exe only uses 1 private key, and the only time that private key
> can
> : be exported is when you export the most recently generated selfssl.exe
> cert.
> :
> : Am I missing something here, or is there another easy way to get many test
> : vhost key pairs over to the other nlb host?
> :
> : Thanks in advance! ;)
>
>
>
>
- Next message: jwmason1_at_gmail.com: "Re: Unable to set up client certificate, error 403.7"
- Previous message: sgm: "Re: IIS 5.0 - Create Server Certificate Wizard"
- In reply to: David Wang [Msft]: "Re: Selfssl.exe for multiple vhosts"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]