Wednesday, December 16, 2015

SSL

So, I'm going to have to host my LMS Reports app locally on my home machine.
I have the webserver running IIS7, but I want both SSL and a trusted cert. So.
I've already registered my domain name (orcuttg.com) with GoDaddy

1. Setup SSL
SSL (https) runs on port 443. In IIS, for the reports website, choose "bindings"
Add https/ssl

TEST:
Now, if I go to https://www.orcuttg.com/default.aspx I get an encrypted connection, with no cert verification

2. Setup cert
I got my cert from rapidssl.com because it's cheap.
First, I need to start the server certificate request process. Go to IIS, and click Server Certificates.
PROBLEM: It may be the case that this option does not exist in IIS. In that case, go to start, run, and type MMC. Then File, Add/Remove Snap In, and add Certificates.
You may have to do this as administrator.
Now if you restart IIS you should have the server certificates option.

Second, open Server Certificates, and Create Certificate Request.
Common Name is www.orcuttg.com
All else is organization name, etc.
It will end with you saving a text file with your part of the shared certificate. Save it to you hard drive.

Third, back at the rapidssl site, it will ask you to upload the text from this file.

Fourth, you will be sent a confirmation email, and if you approve RapidSSL will send you their part of the cert. Save it as server.cer.
Copy ONLY the first block, not the intermediate certs.

Fifth, go back to IIS, and in server certificates click "Complete certificate request"
You will upload the server.cer file and give it the friendly name of your domain.

Lastly, associate the https binding with the certificate. Back at the settings for the IIS website, under bindings, the https, click Edit, and associate your certificate with this website.

Now you should have an https site that gives no errors to the end user.