Is there a way to programaticaly install a ssl cert for iis 6 and 7?
Yeah try IIS 6.0 Resource Kit Tools:
http://www.microsoft.com/downloads/details.aspx?FamilyID=56fc92ee-a71a-4c73-b628-ade629c89499&displaylang=en
It includes a tool called: IISCertDeploy.vbs. This is a tool for deploying and for backing up SSL certificates on servers that run IIS 6.0. You can use IISCertDeploy.vbs to deploy the certificate to a local server, to a cluster of servers, or to a remote server. You can also use IISCertDeploy.vbs to back up a certificate by exporting the certificate from a Web site to a Personal Information Exchange (.pfx) file that contains both the private key and the public key.
Related
I have a webapp server based on nodejs installed on Windows Server 2016. I want to install an SSL Certificate on such server. I've generated a free SSL from Cloudflare but it downloaded a DER file. The person responsible for configuring the Webserver said he needs a .pfx and a passphrase in order to install the SSL Certificate. Is there a way to convert .der to .pfx with a passphrase, or is there any other way to do that for free or buy one at a very low cost,
Thanks in advance!
If you need a custom SSL certificate for you server, consider obtaining it directly from Let's Encrypt https://letsencrypt.org/.
Alternatively, you can use Cloudflare as a reverse proxy on top of your Node.js server that will add SSL automatically without a need to configure anything (other than creating a DNS record and checking "Cloudflare Proxy" (orange) checkbox. Then in your server settings, you would just configure firewall rules to allow connections only from Cloudflare IPs that can be found here — https://www.cloudflare.com/ips/.
I have a virtual machine inside cloud service
i need to install ssl certificate on this cloud service
i saw this post about it
https://azure.microsoft.com/en-gb/documentation/articles/cloud-services-configure-ssl-certificate-portal/
but how can i make step 2?
i tried the rest of the steps and made them
but i have no idea about step 2, i don't have a web role
i have vm
Copying the answer by #Bruno Faria on Server Fault (https://serverfault.com/questions/722796/install-ssl-certificate-on-azure-cloud-service-vm/722811#722811) as I am not allowed to mark this question is duplicate of the one asked there:
The tutorial you are following is for web/worker roles cloud services
and not Virtual Machines. Although a VM uses the cloud service layer,
it's not the same thing. All you have to do is to install the
certificate as you would in any windows server machine and add the
Host A register to your DNS provider.
SSL Certificates CSR Creation :: IIS 8 and IIS 8.5
IIS 8 and IIS 8.5 SSL Certificate Installation
Update: In case of Apache (Linux)
OpenSSL CSR Creation for Apache SSL
Apache SSL Certificate Installation
Also, make sure to reserve your public in order to keep it in a event
of shutdown or restart of your virtual machines.
Reserved IP Overview
I have a certificate generated by Salesforce with crt extension
I exported it to a .cer file on windows (open it -> Details -> copy to path )
I've installed cer file on IIS Manager
I had an error
Cannot find the certificate request associated with this certificate file
I followed the corresponding KB
Now I know my certificate is installed and I have a Friendly name for it, but it still not appearing in IIS.
How can I make a certificate installed on Windows appear in IIS certificates ?
Edit
More about how I got the certificate. There are two companies, one that work with Salesforce and mine.
We are trying to consume a WCF Service from Salesforce Apec Callout.
We choose Transport security with certificate authentication.
For that purpose salesforce team provide a certificate they created, I don't know how. I didn't provide any private key. I guess it's a certificate without official CA.
I'm trying to install it on server were my WCF service is hosted by IIS.
Our current site is on IIS 6.0 with an EV SSL certificate from GoDaddy (I know - bad choice).
I'm currently in the process of migrating to a new server with IIS 7.5. I need to keep the same host name so when the switchover is ready I just want to re-IP the servers.
If I export the SSL from IIS 6.0 and import it on the IIS 7.5 server, will this disable the certificate on the IIS 6? Ideally I'd like to copy the certificate to the new box and then through my hosts file pointing to the new server complete my testing and migration.
GoDaddy support's e-mail response to this, while surprisingly thorough, wasn't clear on that point. They also suggested that after the certificate was moved to the new server to re-key through their site.
Exporting your SSL certificate does not disable your certificate. It just makes a backup copy of it. You should be able to export your certificate from your old server and then import it into your new server with no problem.
If you modify your hosts, as you mentioned, it should let you test your certificate as working.
I am setting up IIS 7.0 on a Windows Vista box. I am using self-signed certificate (by using built-in Create Self-Signed Certificate feature of IIS 7.0) on a web site. The I can browse from the local machine (the machine with IIS and web site) for the https address, for example, https://machinename/test.html, it works.
But when I browse another machine, using the same url, https://machinename/test.html, it does not work (browsers shows cannot connect error message). when browse from another machine using http, e.g. http://machinename/test.html, it works. Any ideas what is wrong? Any limitation of self-signed certificate from another machine?
thanks in advance,
George
Verify that SSL port 443 is allowed by the system's firewall.