Re: SSL over Winsock: How to provide a private key and a certificate to my server application ?

From: kamil (kamildobk_at_xxxpoczta.onet.pl)
Date: 07/07/05 

Date: Thu, 7 Jul 2005 10:17:30 +0200

Użytkownik "Alun Jones [MSFT]" <alunj@online.microsoft.com> napisał w
wiadomości news:OzFF9PngFHA.2268@TK2MSFTNGP15.phx.gbl...
> "kamil" <kamildobk@xxxpoczta.onet.pl> wrote in message
> news:OWIfzXLgFHA.1444@TK2MSFTNGP10.phx.gbl...
>>I have to add an SSL layer to my TCP/IP server. I found an example of SSL
>>server over WinSock using schannel, but how can I use my own certificate
>>and a private key ? I tried to use OpenSSL and it created two files :
>>
>> my-server.cert // self-signed cert
>> privkey.pem // private key
>>
>> Now I have to read them using CertFindCertificateInStore(),
>> AquireCredentialsHandle(), but how can I import them to the store ? Which
>> store should I use in such case ? I tried to use Control Panel / Internet
>> settings, but it doesn't import a private key :(
>
> The easiest way to do this is to use OpenSSL to create a "PFX" (PKCS #12)
> format file from those two, and import that single file into your
> certificate store. You may find some papers on this online, by searching
> for "OpenSSL" and "PFX".
>
> Alun.
> ~~~~

Thanks, it works.

Relevant Pages

  • Re: Obtaining X.509 Certifcates
    ... Certmgr.exe works with two types of certificate stores: ... and CRLs from your disk to a certificate store. ... Also by default, the ASP.NET service runs under the ASPNET account, ... Set the userName attribute of the element to specify ...
    (microsoft.public.dotnet.framework.webservices.enhancements)
  • Re: Obtaining X.509 Certifcates
    ... > Certmgr.exe works with two types of certificate stores: ... > and CRLs from your disk to a certificate store. ... > In order for WSE to obtain the X.509 private key from the local ... > Also by default, the ASP.NET service runs under the ASPNET account, ...
    (microsoft.public.dotnet.framework.webservices.enhancements)
  • Re: Deploying Root Cert via GPO
    ... certificate store, and by mmc, you are accessing current computer's ... Windows Server - Directory Services ... > certificate issued by the above root cert. ...
    (microsoft.public.windows.group_policy)
  • Re: Import Sec Certificate using script
    ... I noticed that you have opened a new post in other newsgroup. ... -addstore Adds a certificate to a certificate store. ... -enterprise Uses the local computer Enterprise registry certificate store. ... CertificateStoreName Specifies one of the following store names: ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: Shared Certificate Store in Active Directory
    ... the case, how do you set up a "Shared Certificate Store", ... When configuring Active Directory based IPSec policy to ...
    (microsoft.public.win2000.security)