My web server is Small Business Server 2003 and I think it use IIS 6. We keep
several web sites. I planned to use "https://..." to acces one of the web
site, but fail. I think I need to put a certificate to the server. I use find
some tutorial on the internet to create the cretificate. All of them are
using Certificate Service comes with IIS, but my server doesn't install it.

Could I create a self signed certificate using OpenSSL, etc, then use it in
my IIS 6?

Yes, to communicate using SSL with https:// , the server must have a
Server Certificate.

This self-signed Server Certificate can be created by anyone on any
machine using any tool. You just need to make sure the certificate's
private key is imported to the LocalSystem store on the IIS server so
that IIS can use the Server Certificate (this is commonly forgotten and
cause people grief).

You can use SelfSSL from the IIS6 Resource Toolkit (or SSLDiag in the
updated IIS Debug Toolkit) to do this. You can also use SSLDiag to
verify that you have everything configured correctly. Basically, run
one single command and SSL works, and one single command to
diagnose/verify SSL is configured correctly.

Read my following blog entries for details/links:
-
http://blogs.msdn.com/david.wang/archive/2005/08/02/Free-SSL-on-IIS.aspx
-
http://blogs.msdn.com/david.wang/archive/2005/04/20/SelfSSL-Bug-with-websites.aspx


//David
http://w3-4u.blogspot.com/
http://blogs.msdn.com/David.Wang
//




Antony wrote:
Show quoteHide quote

IIS7 with multiple web sites - Windows Auth only working on localhost
Could not load type 'System.Web.Security.AccessRoleProvider'
UNC Share causing Internal Server Error 500
Win2K3, IIS6, and IE6 - Can't get IWA/NTLM to work
Virus in IFRAME injected into our ASP pages (downloader trojan on client)
Login not require a domain in IIS hosted site?
notepad will not save .config file in iis7
RPC over HTTPS for Exchange
IIS Security and files upload/create
"Certificate does not have a private key"