Creating SSL certificates.

[Dos_Box]

'Sure we can I said', Ooops. Can anyone out there help me out with either:

a. Free self certificate creating software
b. A site which creates the for free.

We need them for secure (HTTPS) Outlook Web Access to work, and needs to be Windows based.

[Geoff]

Linux with OpenSSL installed. Here's a how:

openssl req -new -newkey rsa:1024 -days 365 -nodes -x509 -keyout www.example.com.pem  -out www.example.com.pem

Enjoy. Just copy the pem file to your windows server when its cooked.

[DMcCoy]

Linux with OpenSSL installed. Here's a how:

openssl req -new -newkey rsa:1024 -days 365 -nodes -x509 -keyout www.example.com.pem  -out www.example.com.pem

Enjoy. Just copy the pem file to your windows server when its cooked.

Can also be done on windows with openssl :P

openssl exe is in this apache package:
http://www.madhon.co.uk/modssl/modssl220_vc6.zip

[russdev]

this any good

http://itt.theintegrity.net/pmwiki.p...ilCertificates

russ

[spc-rocket]

You can use your own dc (which is also i presume the CA for your domain) to do this.

Have a look at www.isaserver.org for more info on how to do this. Its mostly to do with isa server but had some tutorials to create the certificate.

From what i can gather, you need to go into IIS manager and right click on the default website and click on properties.

Then go into the "Directory Security" tabe and under the "secure communications" section select the server certificate and follow the wizard.

Take a look at this -->http://www.isaserver.org/articles/2004pubowartm.html


HTH,

Ash.

[Dos_Box]

this any good

http://itt.theintegrity.net/pmwiki.p...ilCertificates

russ

Not really. I want a server certificate for HTTPS. Not to certify my mail.

[Dos_Box]

You can use your own dc (which is also i presume the CA for your domain) to do this.

Have a look at www.isaserver.org for more info on how to do this. Its mostly to do with isa server but had some tutorials to create the certificate.

From what i can gather, you need to go into IIS manager and right click on the default website and click on properties.

Then go into the "Directory Security" tabe and under the "secure communications" section select the server certificate and follow the wizard.

Take a look at this -->http://www.isaserver.org/articles/2004pubowartm.html


HTH,


That creates a requst for a certificate. You mail that to a certificate provider and they create your cert from that file.
Ash.

[Geoff]

Try this then:

http://www.dylanbeattie.net/docs/ope...ssl_howto.html

Linux solution is less longwinded though

[ChrisH]

I use the method ashok has linked to and its very easy to setup.

Edit My own CA issues the certificate though.

[RobC]

If not by Ashok's method, then there should be another method within Server 2k3 to greate your own certificate as I've done it using my Small Business Server to get an SSL certificate for Outlook Web Access & Remote Web Workplace.

[krb548]

I'm on the CASA Course @ Lancaster Uni, the tutor gave us this link a couple of months ago. See if it is of any use.

StartCom Free SSL

Fantastic. Thanks alot, it works a dream.

[E1uSiV3]

You need to set up a Certificate Authority on your domain and issue yourself a certificate for SSL.

[mitcheln]

The IIS resource kit contains an application called SelfSSL, which I recently used to create a new self-signed certificate for an OWA installation whose certificate had expired. It worked for me.

[Dos_Box]

Now you tell me!!

[eejit]

I need this to work for OWA externally. The selfSSL works great within the domain, but we need something for home users. The security warning in IE7 'looks' much more serious than it did in IE6, any idea how to get a 'proper' certificate? I know absolutely nothing about it - so n00b speak only please