How to use OpenSSL to act as a CA to sign an IIS certificate request for
\nSSL use<\/p>\n
1. Create a certificate request via the Internet Services Manager under
\n‘Directory Security->Secure Communication->Server Certificate’. This
\nis found under the property tab for the webserver you want to secure.
\nFollow the wizard to create a certificate request and fill up all
\nrequired details. At the end of the wizard, it will generate a
\ncertreq.txt file. Move this to your favorite linux box (e.g Debian) or
\nrun openssl under cygwin. contd..
\n<\/p>\n
2. We now have to generate a private key using OpenSSL<\/p>\n
openssl genrsa -des3 -out cakey.pem 2048<\/p>\n
The process will prompt you to supply a PEM pass phrase to help secure the
\nkey.<\/p>\n
3. Now we have to create a CA certificate for our bogus CA<\/p>\n
openssl req -new -x509 -key cakey.pem -out cacert.pem -days 1825<\/p>\n
4. Create the following directories in your home directory<\/p>\n
demoCA
\ndemoCA\/private
\ndemoCA\/newcerts<\/p>\n
Also create in demoCA a empty text file called ‘index.txt’ and a text
\nfile called ‘serial’ with the numbers ’01’<\/p>\n
5. Move your private key cakey.pem to the demoCA\/private directory
\nand cacert.pem to demoCA\/<\/p>\n
6. Sign our previously created IIS certificate request<\/p>\n
openssl ca -in certreq.txt -out iis.cer<\/p>\n
7. Open iis.cer in your favorite text editor (eg vi) and remove all the text
\nbefore the line ‘– Begin Certificate –‘. IIS is not able to handle
\nthe text above that line and may get confused!<\/p>\n
8. Move iis.cer back to your Windows machine and complete the
\ncertificate request in IIS by importing the iis.cer file.<\/p>\n
All done!<\/p>\n
—
\nBest regards,
\n Derek Chew En-Hock mailto:sdchew@ieee.org<\/p>\n","protected":false},"excerpt":{"rendered":"
How to use OpenSSL to act as a CA to sign an IIS certificate request for SSL use 1. Create a certificate request via the Internet Services Manager under ‘Directory Security->Secure Communication->Server Certificate’. This is found under the property tab … Read More »<\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-28","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"http:\/\/www.wildow.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/28","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.wildow.com\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.wildow.com\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.wildow.com\/blog\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"http:\/\/www.wildow.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=28"}],"version-history":[{"count":0,"href":"http:\/\/www.wildow.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/28\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.wildow.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=28"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.wildow.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=28"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.wildow.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=28"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}