|
security
newsgroups
|
|||||||||||||||||||||||
|
|||||||||||||||||||||||
Problem Configure my Web Site to Use SSLposted on the http://support.microsoft.com/kb/324069/ 1. Log on to the Web server computer as an administrator. 2. Click Start, point to Settings, and then click Control Panel. 3. Double-click Administrative Tools, and then double click Internet Services Manager. 4. Select the Web site from the list of different served sites in the left pane. 5. Right-click the Web site, folder, or file for which you want to configure SSL communication, and then click Properties. 6. Click the Directory Security tab. 7. Click Edit. 8. Click Require secure-channel (SSL) if you want the Web site, folder, or file to require SSL communications. 9. Click Require 128-bit encryption to configure 128-bit (instead of 40-bit) encryption support. But the strange thing is that when i click on Edit button i dnt see the Require secure-channel (SSL) OR Click Require 128-bit encryption anywhere ?? what has happened here ?? All i can see is Anonymous Access and Authenticaed Access. Im using Visual Studio .NET 2003 ( asp .net v1.1) and IIS 5.1 on WinXP Pro. Also i would like to clarify my doubt that when i use form authenticatin with the protection set to ALL is it the same as SSL ?? <forms name="MYCOOKIE" loginUrl="login.aspx" protection="All" timeout="30" path="/" /> Or do i need to use SSL for security and encryption ? thanx in advance Hi,
when you click on Directory Security tab go to the bottom and click Edit under Secure Communication. There you will see the options you are looking for. I hope this helps, -- Show quoteHide quoteMike Microsoft MVP - Windows Security "thecoolone" <jah***@gmail.com> wrote in message news:1145296062.738970.270380@i40g2000cwc.googlegroups.com... >I want my site to use SSL, so I followed the following instructions > posted on the http://support.microsoft.com/kb/324069/ > > 1. Log on to the Web server computer as an administrator. > 2. Click Start, point to Settings, and then click Control Panel. > 3. Double-click Administrative Tools, and then double click Internet > Services Manager. > 4. Select the Web site from the list of different served sites in the > left pane. > 5. Right-click the Web site, folder, or file for which you want to > configure SSL communication, and then click Properties. > 6. Click the Directory Security tab. > 7. Click Edit. > 8. Click Require secure-channel (SSL) if you want the Web site, folder, > or file to require SSL communications. > 9. Click Require 128-bit encryption to configure 128-bit (instead of > 40-bit) encryption support. > > But the strange thing is that when i click on Edit button i dnt see the > Require secure-channel (SSL) OR Click Require 128-bit encryption > anywhere ?? what has happened here ?? > All i can see is Anonymous Access and Authenticaed Access. > > Im using Visual Studio .NET 2003 ( asp .net v1.1) and IIS 5.1 on WinXP > Pro. > > Also i would like to clarify my doubt that when i use form > authenticatin with the protection set to ALL is it the same as SSL ?? > <forms name="MYCOOKIE" loginUrl="login.aspx" protection="All" > timeout="30" path="/" /> > Or do i need to use SSL for security and encryption ? > > thanx in advance > i can see the Secure Communication tabs but they are locked.
I cant click on them. Do i need to configure somethin to enable it?? and plz cud someone ans my 2nd question also: Also i would like to clarify my doubt that when i use form authenticatin with the protection set to ALL is it the same as SSL ?? <forms name="MYCOOKIE" loginUrl="login.aspx" protection="All" timeout="30" path="/" /> Or do i need to use SSL for security and encryption ? thecoolone wrote on 18 Apr 2006 07:00:08 -0700:
> i can see the Secure Communication tabs but they are locked. Do you mean the buttons are greyed out? If so, this is what I get when I > I cant click on them. > Do i need to configure somethin to enable it?? used my XP Pro desktop to connect to my server to manage it. You need to use IIS Manager on the server itself, it appears that you can't adjust these settings remotely (at least not with the IIS6 Manager for XP anyway) Dan Daniel Crichton wrote:
> Do you mean the buttons are greyed out? If so, this is what I get when I this mite sound dumb, but can u tell me how to use IIS Manager on the> used my XP Pro desktop to connect to my server to manage it. You need to use > IIS Manager on the server itself, it appears that you can't adjust these > settings remotely (at least not with the IIS6 Manager for XP anyway) server itself ? Hi,
Logon to the server, click on Start -> Control Panel -> Administrative Tools. Here look for "Internet Information Services (IIS) Manager". From here -- everything should be the same as from remote client. -- Show quoteHide quoteMike Microsoft MVP - Windows Security "thecoolone" <jah***@gmail.com> wrote in message news:1145386074.642425.146230@g10g2000cwb.googlegroups.com... > > Daniel Crichton wrote: > >> Do you mean the buttons are greyed out? If so, this is what I get when I >> used my XP Pro desktop to connect to my server to manage it. You need to >> use >> IIS Manager on the server itself, it appears that you can't adjust these >> settings remotely (at least not with the IIS6 Manager for XP anyway) > > > this mite sound dumb, but can u tell me how to use IIS Manager on the > server itself ? > Hi mike,
I had tried that before and i tried it again now. but still the buttons are greyed. whats wrong ?? how to i enable it here's the image :http://www.imagedropbox.com/images/thecoolone/iis.jpg thecoolone wrote on 19 Apr 2006 03:54:41 -0700:
> Hi mike, You set this from the web site node (Default Web Site in your image), *not* > > I had tried that before and i tried it again now. but still the buttons > are greyed. > whats wrong ?? how to i enable it > > here's the image :http://www.imagedropbox.com/images/thecoolone/iis.jpg from the virtual directory. A certificate is a site-wide setting. Dan hi daniel,
im tryin to create a certificate so that i can use SSL. but i tried searching it on google and cant find any SSL certification authority that gives me a certificate free for personal use. Can u tell me how can i get a certificate either a generic one or a specific one will do. I just want to be able to use SSL. thecoolone wrote on 22 Apr 2006 12:45:38 -0700:
> hi daniel, If it's for personal use only you can use Microsoft Certificate Server. Here > > im tryin to create a certificate so that i can use SSL. > but i tried searching it on google and cant find any SSL certification > authority that gives me a certificate free for personal use. are instructions for IIS5, they should be pretty much the same as IIS6 http://support.microsoft.com/?id=299525 Basically, you create your own certificate signing authority in Certificate Server, use IIS to request a certificate, sign it in Certificate Server, add the signed cert into IIS. You can then connect to IIS via SSL, and to avoid the security warning you can install the root certificate into your browser. > Can u tell me how can i get a certificate either a generic one or a What exactly are you using SSL for? If it's purely for encrypting the > specific one will do. > I just want to be able to use SSL. connection and won't be used for public access to your server, using a self created certificate will be fine. If this is going to be used by people connecting to your site that you have no control over adding certs to their browsers, you will need a paid certificate if you want to avoid the security dialog that informs the user that the certificate is not trusted. I don't know of any free server certificates that are signed by a common browser trusted authority - the whole point of a publicly trusted certificate is that the owning company has had checks carried out against it, and that costs money. Dan Hi,
As suggested by Daniel you can set up your own CA server. If you want, you can also use SelfSSL tool from IIS resource kit. In this case, you will not need to install CA server... You can download it for free here... The IIS 6.0 Resource Kit Tools http://support.microsoft.com/?id=840671 -- Show quoteHide quoteMike Microsoft MVP - Windows Security "thecoolone" <jah***@gmail.com> wrote in message news:1145735138.035857.182080@e56g2000cwe.googlegroups.com... > hi daniel, > > im tryin to create a certificate so that i can use SSL. > but i tried searching it on google and cant find any SSL certification > authority that gives me a certificate free for personal use. > > Can u tell me how can i get a certificate either a generic one or a > specific one will do. > I just want to be able to use SSL. > thanx u guyz for replyin
and daniel to ans ur q abt what im using SSL for.. well im using it for my academic project based on internet banking. So for secure online bankin transactions i thought it would be better to use SSL instead of TLS. As of now im not going to have any public access to a server. But on reading what u said.. suppose i make a personal certificate and then host my site on any free domain like vwww.wdhosting.com or http://www.brinkster.com will i still be able to view webpages using SSL ? Hi,
TLS is actually better then SSL. It is never protocol that removes faults from earlier version of secure transfer protocol (SSL3, SSL2, ...). To answer you second question -- I don't know. You have to check with your web service provider that you will choose if they offer/allow/provide SSL/TLS protocols. -- Show quoteHide quoteMike Microsoft MVP - Windows Security "thecoolone" <jah***@gmail.com> wrote in message news:1145987126.792860.249850@j33g2000cwa.googlegroups.com... > thanx u guyz for replyin > > and daniel to ans ur q abt what im using SSL for.. well im using it for > my academic project based on internet banking. So for secure online > bankin transactions i thought it would be better to use SSL instead of > TLS. As of now im not going to have any public access to a server. > > But on reading what u said.. suppose i make a personal certificate and > then host my site on any free domain like vwww.wdhosting.com or > http://www.brinkster.com will i still be able to view webpages using > SSL ? > thecoolone wrote on 25 Apr 2006 10:45:26 -0700:
> thanx u guyz for replyin TLS is effectively SSL v4. SSL was a Netscape creation, TLS is a > > and daniel to ans ur q abt what im using SSL for.. well im using it for > my academic project based on internet banking. So for secure online > bankin transactions i thought it would be better to use SSL instead of > TLS. As of now im not going to have any public access to a server. standardised protocol. At least that was my understanding back when I first came across TLS (and promptly changed the IE option back to using SSL because our web platform didn't support TLS). > But on reading what u said.. suppose i make a personal certificate and You will need a hosting company that will allow SSL - most of them will > then host my site on any free domain like vwww.wdhosting.com or > http://www.brinkster.com will i still be able to view webpages using > SSL ? charge for this as they will get a paid certificate installed, as a free certificate is generally useless for a public facing server as "customers" will get a warning dialog that the certificate path is not trusted - not something you want on a public site where you have no control over the browsers connecting. Dan im tryin to create a certifcate as per the instuctions here
http://support.microsoft.com/?id=299525 but im having a problem, when i try to do Browse to http://CAServerName/CertSrv, and select Request a certificate. i.e in my system http://home/CertSrv in getting "The page cannot be found"error. whats worng here?? i have checked and installed all the IIS options that were available. but still no use. what should i do now ?? plz help Hi,
Do you have CA service installed on this server? Was IIS installed before CA? If you want, you can also use SelfSSL tool from IIS resource kit. In this case, you will not need to install CA server... You can download it for free here... The IIS 6.0 Resource Kit Tools http://support.microsoft.com/?id=840671 -- Show quoteHide quoteMike Microsoft MVP - Windows Security "thecoolone" <jah***@gmail.com> wrote in message news:1146413007.978660.264300@j73g2000cwa.googlegroups.com... > im tryin to create a certifcate as per the instuctions here > http://support.microsoft.com/?id=299525 > > but im having a problem, when i try to do > Browse to http://CAServerName/CertSrv, and select Request a > certificate. > i.e in my system http://home/CertSrv in getting "The page cannot be > found"error. > whats worng here?? i have checked and installed all the IIS options > that were available. but still no use. > > what should i do now ?? plz help > I downloaded IIS 6.0 Resource Kit Tools and installed it but now its
asks for win 2003. rite now i have win XP pro SP1 and it says "SelfSSL is compatible with IIS 6.0 running on the Microsoft® Windows® Server 2003 operating system" So anyother way to create certificates in Win XP pro SP1 Hi,
I downloaded Resource Kit and installed only SelfSSL tool (custom installation) on my Windows XP SP2. Then I run SelfSSL tool on my Windows XP SP2 with IIS 5.1 running and SelfSSL was able to generate and install new certificate. -- Mike Microsoft MVP - Windows Security "thecoolone" <jah***@gmail.com> wrote in message I downloaded IIS 6.0 Resource Kit Tools and installed it but now itsnews:1146424769.256019.291640@e56g2000cwe.googlegroups.com... asks for win 2003. rite now i have win XP pro SP1 and it says "SelfSSL is compatible with IIS 6.0 running on the Microsoft® Windows® Server 2003 operating system" So anyother way to create certificates in Win XP pro SP1 Hi,
Here is a screen shot of the button that you must choose. http://freeweb.siol.net/mpihler/edit_button.jpg. Can you check this setting on the server as suggested by Daniel. Is View Certificate button disabled? For encryption of data between client and server you must use SSL. -- Show quoteHide quoteMike Microsoft MVP - Windows Security "thecoolone" <jah***@gmail.com> wrote in message news:1145368808.362250.194710@g10g2000cwb.googlegroups.com... >i can see the Secure Communication tabs but they are locked. > I cant click on them. > Do i need to configure somethin to enable it?? > > and plz cud someone ans my 2nd question also: > > Also i would like to clarify my doubt that when i use form > authenticatin with the protection set to ALL is it the same as SSL ?? > <forms name="MYCOOKIE" loginUrl="login.aspx" protection="All" > timeout="30" path="/" /> > Or do i need to use SSL for security and encryption ? > hey MVP,
i dloaded the IIS6 toolkit and used the SelfSSL to install a own certificate. Now im gettin a error "SSL security error" while tryin to connect to the database.(i.e sql.open()) why is this happenin??? plz help me out here. before using SSL everythin was workin fine. but now its not/. Also i would like to knw that if i wanted to remove ssl capability from my site how can i do that ??? i searched a lot on google but with no luck. all i can find is how to install SSL but not how to disable SSL. any help is appreciated. thanx no reply... huh :(
well MVP i tried to uninstall SQL and reinstall MS SQL 2000. but im gettin the following error which im posing from the setuplog file "############################################################################### Starting Service ... SQL_Latin1_General_CP1_CI_AS -m -Q -T4022 -T3659 Connecting to Server ... driver={sql server};server=HOME;UID=sa;PWD=;database=master [Microsoft][ODBC SQL Server Driver][Shared Memory]SSL Security error [Microsoft][ODBC SQL Server Driver][Shared Memory]ConnectionOpen (SECDoClientHandshake()). driver={sql server};server=HOME;UID=sa;PWD=;database=master [Microsoft][ODBC SQL Server Driver][Shared Memory]SSL Security error [Microsoft][ODBC SQL Server Driver][Shared Memory]ConnectionOpen (SECDoClientHandshake()). driver={sql server};server=HOME;UID=sa;PWD=;database=master [Microsoft][ODBC SQL Server Driver][Shared Memory]SSL Security error [Microsoft][ODBC SQL Server Driver][Shared Memory]ConnectionOpen (SECDoClientHandshake()). SQL Server configuration failed. ############################################################################### |
|||||||||||||||||||||||
Other interesting topics