Need help with HTTPS

From: paul (boloh77_at_hotmail.com)
Date: 12/26/04

  • Next message: Steve Riley [MSFT]: "Re: Need help with HTTPS" 
    Date: Sun, 26 Dec 2004 11:42:10 -0500

    Hey all

    I'm new at this, so please bear with me.

    Basically, I'm trying to set things up so that clients would connect to my
    asp.net web site (.aspx) vias https.
    I have been following the following links closely to accomplish this:
    http://support.microsoft.com/kb/816794
    http://support.microsoft.com/default.aspx?scid=kb;en-us;324069

    My problem (as far as I know) is two-fold:
    i) I am unable to select the 'Server Certificate' (it is shaded out) when I
    follow the steps below as outlined in one of the links above:
    Assign the Imported Certificate to the Web Site
          1. Click Start, point to Administrative Tools, and then click Internet
    Information Services (IIS) Manager.
          2. In the left pane, click your server.
          3. In the right pane, double-click Web Sites.
          4. In the right pane, right-click the Web site you want to assign the
    certificate to, and then click Properties.
          5. Click Directory Security, and then click Server Certificate.
          6. On the Welcome to the Web Certificate Wizard page, click Next.
          7. On the Server Certificate page, click Assign an existing
    certificate, and then click Next.
          8. On the Available Certificates page, click the installed certificate
    you want to assign to this Web site, and then click Next.
          9. On the SSL Port page, configure the SSL port number. The default
    port of 443 is appropriate for most situations.
          10. Click Next.
          11. On the Certificate Summary page, review the information about the
    certificate, and then click Next.
          12. On the Completing the Web Server Certificate Wizard page, click
    Finish, and then click OK.

    Anybody know why this is the case?

    ii) I suspect (possibly incorrectly) that I might not have a certificate
    installed in the Windows 2003 certificate store. I was able to generate,
    issue, and store a certificate in a .cer file. However, what oid (i.e.
    usage) should I use for the certificate generation? Currently I'm using
    1.3.6.1.4.1.311.2.1.21, which represents a client-browser certificate. Is
    this correct for what I'm trying to do? Also, once the certificate is
    generated, should I store it under the 'personal' folder?

    Any feedbacks that you guys can give me would be awesome and highly
    appreciated!

    Thanks,
    Paul

  • Next message: Steve Riley [MSFT]: "Re: Need help with HTTPS"

    Relevant Pages

    • Re: SMS 2003 SP1 Client Install Problem or Policy Retreival Problem?
      ... > Failed to find running shell process ... >> It is possible that the crypto store has somehow been corrupted. ... >>> The MP is setup and thousands of other clients have access. ... >>> Failed to find the certificate in the store, ...
      (microsoft.public.sms.admin)
    • Re: SMS 2003 SP1 Client Install Problem or Policy Retreival Problem?
      ... It is possible that the crypto store has somehow been corrupted. ... These clients> show as assigned to the site in the admin console, ... > Failed to find the certificate in the store, retry 1. ...
      (microsoft.public.sms.admin)
    • [NT] Flaw in Certificate Enrollment Control Could Allow Deletion of Digital Certificates
      ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... Certificate Enrollment Control, the purpose of which is to allow web-based ...
      (Securiteam)
    • Re: Embedding Simple MFC GUI app into website
      ... The problem with security is that so many people say "it doesn't matter". ... particular technology is "evil" goes beyond common sense and increases ... Since you must obtain a certificate for code signing from the trusted ... use it for a general purpose web site as we have all discussed, ...
      (microsoft.public.vc.mfc)
    • Re: Embedding Simple MFC GUI app into website
      ... particular technology is "evil" goes beyond common sense and increases ... ActiveX, in particular, is an antipattern for security. ... Since you must obtain a certificate for code signing from the trusted ... use it for a general purpose web site as we have all discussed, ...
      (microsoft.public.vc.mfc)