I would recommend that you try a test starred certificate from Thawte
(www.thawte.com) but create your key with mod_ssl first. The certificate
from Thawte for mod_ssl is the same that can be used with IIS4.0 (I know I'm
right about this because this is how we run it!)
However, the key you create for mod_ssl will not work with IIS. This is
where openssl helps.
Type the following where you install your private key (I assume you are
calling it modssl.key)
openssl rsa -in modssl.key -out iis.key -outform NET
This will prompt you for a passphrase. Make sure to put one in!
Next copy the certificate and iis.key to a floppy (with mcopy or mount a DOS
floppy).
Put this floppy in your NT server and run Key Manager. Select Key/Import
Key/KeySet Files.
Put in the file names for your certificate and private key.
You should now be able to use the same key/cert for IIS4.0 and modssl.
Once finished eat the floppy disk ;-)
-
John Airey
Internet Systems Support Officer, ITCSD, Royal National Institute for the
Blind,
Bakewell Road, Peterborough PE2 6XU,
Tel.: +44 (0) 1733 375299 Fax: +44 (0) 1733 370848 [EMAIL PROTECTED]
-----Original Message-----
From: Juergen Schreier [mailto:[EMAIL PROTECTED]]
Sent: 14 July 2000 14:04
To: [EMAIL PROTECTED]
Subject: Can I create a Server Certificate for MS IIS4.0 with mod_ssl
Hi all,
I need to test an application in a heterogenous Environment (i.e. Apache AND
MS IIS 4.0
Webservers).
This Application is supposed to support SSL encryption between Clients (all
kinds of browsers)
and Servers.
At the moment I don't want to buy an expensive Verisign Certificate and want
to experiment in
making my own certs for the test and if applicable even in the productive
enviroment since all
Users would know the issuer of that cert would be trustworthy.
So my question is:
Can I create a Server Certificate for MS IIS4.0 with mod_ssl
and if the answer is yes, how.
Any hints - to a howto Document on making certificates with mod_ssl in
general - or how
solve my specific questions are very welcome
thanx in advance
J�rgen Schreier
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
