Problem Configure my Web Site to Use SSL

I want my site to use SSL, so I followed the following instructions
posted on the http://support.microsoft.com/kb/324069/

1. Log on to the Web server computer as an administrator.
2. Click Start, point to Settings, and then click Control Panel.
3. Double-click Administrative Tools, and then double click Internet
Services Manager.
4. Select the Web site from the list of different served sites in the
left pane.
5. Right-click the Web site, folder, or file for which you want to
configure SSL communication, and then click Properties.
6. Click the Directory Security tab.
7. Click Edit.
8. Click Require secure-channel (SSL) if you want the Web site, folder,
or file to require SSL communications.
9. Click Require 128-bit encryption to configure 128-bit (instead of
40-bit) encryption support.

But the strange thing is that when i click on Edit button i dnt see the
Require secure-channel (SSL) OR Click Require 128-bit encryption
anywhere ?? what has happened here ??
All i can see is Anonymous Access and Authenticaed Access.

Im using Visual Studio .NET 2003 ( asp .net v1.1) and IIS 5.1 on WinXP
Pro.

Also i would like to clarify my doubt that when i use form
authenticatin with the protection set to ALL is it the same as SSL ??
timeout="30" path="/" />
Or do i need to use SSL for security and encryption ?

thanx in advance

Re: Problem Configure my Web Site to Use SSL

Hi,

when you click on Directory Security tab go to the bottom and click Edit
under Secure Communication. There you will see the options you are looking
for.

I hope this helps,

--
Mike
Microsoft MVP - Windows Security


"thecoolone" wrote in message
news:1145296062.738970.270380@i40g2000cwc.googlegroups.com.. .
>I want my site to use SSL, so I followed the following instructions
> posted on the http://support.microsoft.com/kb/324069/
>
> 1. Log on to the Web server computer as an administrator.
> 2. Click Start, point to Settings, and then click Control Panel.
> 3. Double-click Administrative Tools, and then double click Internet
> Services Manager.
> 4. Select the Web site from the list of different served sites in the
> left pane.
> 5. Right-click the Web site, folder, or file for which you want to
> configure SSL communication, and then click Properties.
> 6. Click the Directory Security tab.
> 7. Click Edit.
> 8. Click Require secure-channel (SSL) if you want the Web site, folder,
> or file to require SSL communications.
> 9. Click Require 128-bit encryption to configure 128-bit (instead of
> 40-bit) encryption support.
>
> But the strange thing is that when i click on Edit button i dnt see the
> Require secure-channel (SSL) OR Click Require 128-bit encryption
> anywhere ?? what has happened here ??
> All i can see is Anonymous Access and Authenticaed Access.
>
> Im using Visual Studio .NET 2003 ( asp .net v1.1) and IIS 5.1 on WinXP
> Pro.
>
> Also i would like to clarify my doubt that when i use form
> authenticatin with the protection set to ALL is it the same as SSL ??
> > timeout="30" path="/" />
> Or do i need to use SSL for security and encryption ?
>
> thanx in advance
>

Re: Problem Configure my Web Site to Use SSL

i can see the Secure Communication tabs but they are locked.
I cant click on them.
Do i need to configure somethin to enable it??

and plz cud someone ans my 2nd question also:

Also i would like to clarify my doubt that when i use form
authenticatin with the protection set to ALL is it the same as SSL ??
timeout="30" path="/" />
Or do i need to use SSL for security and encryption ?

Re: Problem Configure my Web Site to Use SSL

thecoolone wrote on 18 Apr 2006 07:00:08 -0700:

> i can see the Secure Communication tabs but they are locked.
> I cant click on them.
> Do i need to configure somethin to enable it??

Do you mean the buttons are greyed out? If so, this is what I get when I
used my XP Pro desktop to connect to my server to manage it. You need to use
IIS Manager on the server itself, it appears that you can't adjust these
settings remotely (at least not with the IIS6 Manager for XP anyway)

Dan

Re: Problem Configure my Web Site to Use SSL

Hi,

Here is a screen shot of the button that you must choose.
http://freeweb.siol.net/mpihler/edit_button.jpg. Can you check this setting
on the server as suggested by Daniel. Is View Certificate button disabled?

For encryption of data between client and server you must use SSL.

--
Mike
Microsoft MVP - Windows Security

"thecoolone" wrote in message
news:1145368808.362250.194710@g10g2000cwb.googlegroups.com.. .
>i can see the Secure Communication tabs but they are locked.
> I cant click on them.
> Do i need to configure somethin to enable it??
>
> and plz cud someone ans my 2nd question also:
>
> Also i would like to clarify my doubt that when i use form
> authenticatin with the protection set to ALL is it the same as SSL ??
> > timeout="30" path="/" />
> Or do i need to use SSL for security and encryption ?
>

Re: Problem Configure my Web Site to Use SSL

Daniel Crichton wrote:

> Do you mean the buttons are greyed out? If so, this is what I get when I
> used my XP Pro desktop to connect to my server to manage it. You need to use
> IIS Manager on the server itself, it appears that you can't adjust these
> settings remotely (at least not with the IIS6 Manager for XP anyway)


this mite sound dumb, but can u tell me how to use IIS Manager on the
server itself ?

Re: Problem Configure my Web Site to Use SSL

Hi,

Logon to the server, click on Start -> Control Panel -> Administrative
Tools. Here look for "Internet Information Services (IIS) Manager". From
here -- everything should be the same as from remote client.

--
Mike
Microsoft MVP - Windows Security

"thecoolone" wrote in message
news:1145386074.642425.146230@g10g2000cwb.googlegroups.com.. .
>
> Daniel Crichton wrote:
>
>> Do you mean the buttons are greyed out? If so, this is what I get when I
>> used my XP Pro desktop to connect to my server to manage it. You need to
>> use
>> IIS Manager on the server itself, it appears that you can't adjust these
>> settings remotely (at least not with the IIS6 Manager for XP anyway)
>
>
> this mite sound dumb, but can u tell me how to use IIS Manager on the
> server itself ?
>

Re: Problem Configure my Web Site to Use SSL

Hi mike,

I had tried that before and i tried it again now. but still the buttons
are greyed.
whats wrong ?? how to i enable it

here's the image :http://www.imagedropbox.com/images/thecoolone/iis.jpg

Re: Problem Configure my Web Site to Use SSL

thecoolone wrote on 19 Apr 2006 03:54:41 -0700:

> Hi mike,
>
> I had tried that before and i tried it again now. but still the buttons
> are greyed.
> whats wrong ?? how to i enable it
>
> here's the image :http://www.imagedropbox.com/images/thecoolone/iis.jpg

You set this from the web site node (Default Web Site in your image), *not*
from the virtual directory. A certificate is a site-wide setting.

Dan

Re: Problem Configure my Web Site to Use SSL

hi daniel,

im tryin to create a certificate so that i can use SSL.
but i tried searching it on google and cant find any SSL certification
authority that gives me a certificate free for personal use.

Can u tell me how can i get a certificate either a generic one or a
specific one will do.
I just want to be able to use SSL.

Re: Problem Configure my Web Site to Use SSL

thecoolone wrote on 22 Apr 2006 12:45:38 -0700:

> hi daniel,
>
> im tryin to create a certificate so that i can use SSL.
> but i tried searching it on google and cant find any SSL certification
> authority that gives me a certificate free for personal use.

If it's for personal use only you can use Microsoft Certificate Server. Here
are instructions for IIS5, they should be pretty much the same as IIS6

http://support.microsoft.com/?id=299525

Basically, you create your own certificate signing authority in Certificate
Server, use IIS to request a certificate, sign it in Certificate Server, add
the signed cert into IIS. You can then connect to IIS via SSL, and to avoid
the security warning you can install the root certificate into your browser.

> Can u tell me how can i get a certificate either a generic one or a
> specific one will do.
> I just want to be able to use SSL.

What exactly are you using SSL for? If it's purely for encrypting the
connection and won't be used for public access to your server, using a self
created certificate will be fine. If this is going to be used by people
connecting to your site that you have no control over adding certs to their
browsers, you will need a paid certificate if you want to avoid the security
dialog that informs the user that the certificate is not trusted. I don't
know of any free server certificates that are signed by a common browser
trusted authority - the whole point of a publicly trusted certificate is
that the owning company has had checks carried out against it, and that
costs money.

Dan

Re: Problem Configure my Web Site to Use SSL

Hi,

As suggested by Daniel you can set up your own CA server. If you want, you
can also use SelfSSL tool from IIS resource kit. In this case, you will not
need to install CA server...

You can download it for free here...

The IIS 6.0 Resource Kit Tools
http://support.microsoft.com/?id=840671

--
Mike
Microsoft MVP - Windows Security

"thecoolone" wrote in message
news:1145735138.035857.182080@e56g2000cwe.googlegroups.com.. .
> hi daniel,
>
> im tryin to create a certificate so that i can use SSL.
> but i tried searching it on google and cant find any SSL certification
> authority that gives me a certificate free for personal use.
>
> Can u tell me how can i get a certificate either a generic one or a
> specific one will do.
> I just want to be able to use SSL.
>

Re: Problem Configure my Web Site to Use SSL

thanx u guyz for replyin

and daniel to ans ur q abt what im using SSL for.. well im using it for
my academic project based on internet banking. So for secure online
bankin transactions i thought it would be better to use SSL instead of
TLS. As of now im not going to have any public access to a server.

But on reading what u said.. suppose i make a personal certificate and
then host my site on any free domain like vwww.wdhosting.com or
http://www.brinkster.com will i still be able to view webpages using
SSL ?

Re: Problem Configure my Web Site to Use SSL

Hi,

TLS is actually better then SSL. It is never protocol that removes faults
from earlier version of secure transfer protocol (SSL3, SSL2, ...).

To answer you second question -- I don't know. You have to check with your
web service provider that you will choose if they offer/allow/provide
SSL/TLS protocols.

--
Mike
Microsoft MVP - Windows Security

"thecoolone" wrote in message
news:1145987126.792860.249850@j33g2000cwa.googlegroups.com.. .
> thanx u guyz for replyin
>
> and daniel to ans ur q abt what im using SSL for.. well im using it for
> my academic project based on internet banking. So for secure online
> bankin transactions i thought it would be better to use SSL instead of
> TLS. As of now im not going to have any public access to a server.
>
> But on reading what u said.. suppose i make a personal certificate and
> then host my site on any free domain like vwww.wdhosting.com or
> http://www.brinkster.com will i still be able to view webpages using
> SSL ?
>

Re: Problem Configure my Web Site to Use SSL

thecoolone wrote on 25 Apr 2006 10:45:26 -0700:

> thanx u guyz for replyin
>
> and daniel to ans ur q abt what im using SSL for.. well im using it for
> my academic project based on internet banking. So for secure online
> bankin transactions i thought it would be better to use SSL instead of
> TLS. As of now im not going to have any public access to a server.

TLS is effectively SSL v4. SSL was a Netscape creation, TLS is a
standardised protocol. At least that was my understanding back when I first
came across TLS (and promptly changed the IE option back to using SSL
because our web platform didn't support TLS).

> But on reading what u said.. suppose i make a personal certificate and
> then host my site on any free domain like vwww.wdhosting.com or
> http://www.brinkster.com will i still be able to view webpages using
> SSL ?

You will need a hosting company that will allow SSL - most of them will
charge for this as they will get a paid certificate installed, as a free
certificate is generally useless for a public facing server as "customers"
will get a warning dialog that the certificate path is not trusted - not
something you want on a public site where you have no control over the
browsers connecting.

Dan

Re: Problem Configure my Web Site to Use SSL

im tryin to create a certifcate as per the instuctions here
http://support.microsoft.com/?id=299525

but im having a problem, when i try to do
Browse to http://CAServerName/CertSrv, and select Request a
certificate.
i.e in my system http://home/CertSrv in getting "The page cannot be
found"error.
whats worng here?? i have checked and installed all the IIS options
that were available. but still no use.

what should i do now ?? plz help

Re: Problem Configure my Web Site to Use SSL

Hi,

Do you have CA service installed on this server? Was IIS installed before
CA?

If you want, you can also use SelfSSL tool from IIS resource kit. In this
case, you will not need to install CA server...

You can download it for free here...

The IIS 6.0 Resource Kit Tools
http://support.microsoft.com/?id=840671

--
Mike
Microsoft MVP - Windows Security

"thecoolone" wrote in message
news:1146413007.978660.264300@j73g2000cwa.googlegroups.com.. .
> im tryin to create a certifcate as per the instuctions here
> http://support.microsoft.com/?id=299525
>
> but im having a problem, when i try to do
> Browse to http://CAServerName/CertSrv, and select Request a
> certificate.
> i.e in my system http://home/CertSrv in getting "The page cannot be
> found"error.
> whats worng here?? i have checked and installed all the IIS options
> that were available. but still no use.
>
> what should i do now ?? plz help
>

Re: Problem Configure my Web Site to Use SSL

I downloaded IIS 6.0 Resource Kit Tools and installed it but now its
asks for win 2003.
rite now i have win XP pro SP1

and it says "SelfSSL is compatible with IIS 6.0 running on the
Microsoft=AE Windows=AE Server 2003 operating system"

So anyother way to create certificates in Win XP pro SP1

Re: Problem Configure my Web Site to Use SSL

Hi,

I downloaded Resource Kit and installed only SelfSSL tool (custom
installation) on my Windows XP SP2. Then I run SelfSSL tool on my Windows XP
SP2 with IIS 5.1 running and SelfSSL was able to generate and install new
certificate.

--
Mike
Microsoft MVP - Windows Security

"thecoolone" wrote in message
news:1146424769.256019.291640@e56g2000cwe.googlegroups.com.. .
I downloaded IIS 6.0 Resource Kit Tools and installed it but now its
asks for win 2003.
rite now i have win XP pro SP1

and it says "SelfSSL is compatible with IIS 6.0 running on the
Microsoft® Windows® Server 2003 operating system"

So anyother way to create certificates in Win XP pro SP1

Re: Problem Configure my Web Site to Use SSL

ok will try that..

Re: Problem Configure my Web Site to Use SSL

hey MVP,

i dloaded the IIS6 toolkit and used the SelfSSL to install a own
certificate.

Now im gettin a error "SSL security error" while tryin to connect to
the database.(i.e sql.open())
why is this happenin??? plz help me out here. before using SSL
everythin was workin fine. but now its not/.

Also i would like to knw that if i wanted to remove ssl capability from
my site how can i do that ??? i searched a lot on google but with no
luck. all i can find is how to install SSL but not how to disable SSL.

any help is appreciated.

thanx

Re: Problem Configure my Web Site to Use SSL

no reply... huh :(

well MVP i tried to uninstall SQL and reinstall MS SQL 2000.
but im gettin the following error which im posing from the setuplog
file
"########################################################### ####################


Starting Service ...

SQL_Latin1_General_CP1_CI_AS

-m -Q -T4022 -T3659

Connecting to Server ...

driver={sql server};server=HOME;UID=sa;PWD=;database=master

[Microsoft][ODBC SQL Server Driver][Shared Memory]SSL Security error

[Microsoft][ODBC SQL Server Driver][Shared Memory]ConnectionOpen
(SECDoClientHandshake()).

driver={sql server};server=HOME;UID=sa;PWD=;database=master

[Microsoft][ODBC SQL Server Driver][Shared Memory]SSL Security error

[Microsoft][ODBC SQL Server Driver][Shared Memory]ConnectionOpen
(SECDoClientHandshake()).

driver={sql server};server=HOME;UID=sa;PWD=;database=master

[Microsoft][ODBC SQL Server Driver][Shared Memory]SSL Security error

[Microsoft][ODBC SQL Server Driver][Shared Memory]ConnectionOpen
(SECDoClientHandshake()).

SQL Server configuration failed.

############################################################ ###################