IIS: Created self signed certificates using makecert.exe for local IIS

You have learned how to run the local IIS on https with self signed certificate with my previous blog http://iistipsandtricks.blogspot.in/2015/08/make-your-site-work-with-https-on-local.html.

 Now you want to get rid of the error you get when you first time get when you run your site with a untrusted self signed certificate. Also if you are working with SAS platform then you need to send authentication token which require trusted certificate. 

 These are steps below to make it work.

 1. Open the Developer command prompt for visual Studio.
2. Run the below 2 commands on that window command prompt.
makecert -r -n "CN=localhost" -b 01/01/2000 -e 01/01/2099 -eku 1.3.6.1.5.5.7.3.1 -sv localhost.pvk localhost.cer
cert2spc localhost.cer localhost.spc
pvk2pfx -pvk localhost.pvk -spc localhost.spc -pfx localhost.pfx

 You can do selecting all the 2 commands and paste to the command window and hit enter.
3. This above command will ask you 3-4 times for the password give a password on the all the dialog same.


 4. After the above step this will create 4 files with name localhost.cer, localhost.pfx, localhost.pvk and localhost.spc. at path c:\windows\SysWow64(64bit machine) or c:\window\system32(32bit machine)

 5. Copy these files to a folder outside that folder so that you can have that handy.
6. Now open the IIS Manager and select the rootnode on the left side panel.
7. Double double click the Server Certificate and then click Import on the Right hand side panel.

 8. After clicking the Import it will open the dialogue for importing the certificate which you have created on step 1-5. Select the .pfx file from the folder you have kept the generated files.

 9. Now your certificate will be available on the certificate list.
10. Now go and select the Default Web Site node from the left side panel on IIS and click on the Bindings on the right hand side Action Panel.

 12. On that dialog select the https binding and click Edit button.

 13. now on the edit binding dialog select your imported certificate on the SSL certificate drop down and click OK to save.

 14. Now run your site with https url.
15. when the site run it gives you the error related to certificate " there is problem with this website's security certificate". click on "Continue to the this website (not recommended)" .
16. When clicked the link to Continue to this website, you need to click on Certificate error in the address bar, which would inform you that the website was using an Untrusted certificate.

 17. If you click View certificates, the Certificate dialog box informed you that the CA Root certificate was not trusted.

 18. In that dialog you need to click install certificate, which open Certificate Import Wizard ask you where to install the certificate. where on the first step it will ask you choose store location. select local machine and Click Next button.

 19. On the next screen Click Place all certificates in the following store, and then click Browse.

 20. When the Select Certificate Store dialog box is displayed, click Trusted Root Certification Authorities, and then click OK.

 21. On the Certificate Import Wizard, click Next.
22. Completing the Certificate Import Wizard page is displayed in the wizard, click Finish.
23. Click OK when the Certificate Import Wizard informs you that the import was successful.
24. Now run your site and it will not give you the security certificate error.

 Enjoy you https site running with trusted self signed certificate.
Note: all the sites i have run in the Internet explorer 11.


Comments

Post a Comment

Popular posts from this blog

LINQ: Using int.TryParse() within a LINQ where clause

I pretty new to LINQ, and I’m keen to get more experience using it, so whenever an opportunity arises I like to try writing LINQ queries. I needed to write a method to extract a comma separated list of numbers from a config file, and return this as List. I was looking at ways to do this using LINQ, but hit a problem. I wanted my LINQ query to filter out any values in the CSV string that could not be parsed as an int, without causing an exception. Using int.TryParse() seemed like a possible solution, but I had problems because the TryParse() method has an out parameter to store the parsed result. I ended up with the code below, which seems to work, but looks very messy, because I think it is parsing the string twice. public static List<int> AuthorisedGroups { get       {             string[] authorisedGroupsStr = ConfigurationManager.AppSettings["AuthorisedGroups"].Split(new char[] { ...
Read more

ASP.Net MVC: Configuring asp.net session state in SQL Server.

Image
Step 1 : Go to the command prompt and run the following  commanad aspnet_regsql.exe -S <ServerName>- E -ssadd -sstype p where < ServerName > is the  name of the server where your  Database is located. here for my local machine we have given (local). Before running the command we need to check  file v4.0.30319 on the following path C:\Windows\Microsoft.NET\Framework if it is not found then we need to install  it.   After running the command it will create database for SQL session tables. So now go to the SQL server and there we can see that it has created Database named “ASPState”. For more option here is the Link http://msdn.microsoft.com/en-us/library/ms229862(v=vs.80).aspx See the following image. Step 2: Now go to the Security Tab (outside the Database)> Login >app pool  user here for my local system it is pspl-PC21\pspl Right click on app pool user ( pspl-PC21\p...
Read more

IIS: Publish Project to remote IIS with Web Deploy.

Image
To Push a build is too much hectic task. Like you need to publish to local machine and then copy to the remote IIS. Then can be eased by directly push the build to the remote IIS through web deploy. For this there is 2 things you need configure on in the remote IIS and other on your project file. Configuration on Remote IIS To make this whole thing work you need to install Microsoft Web Deploy and you need to choose all the feature to be install on the machine. you need to add the feature of IIS Management Service. for this you need to make sure you have added Management tool feature to the IIS. Configuration on the Project side In the Visual Studio right click on the solution and make a rebuild. Then right click on the web project and select the menu "Publish". On the Profile tab Drop down list select New Custom Profile. Give a name to the publish Profile and click OK. Then click next and on the next tab "Connection" sele...
Read more