Watch, Follow, &
Connect with Us

For forums, blogs and more please visit our
Developer Tools Community.


Welcome, Guest
Guest Settings
Help

Thread: Intraweb + SSL


This question is answered. Helpful answers available: 2. Correct answers available: 1.


Permlink Replies: 6 - Last Post: Sep 20, 2017 12:53 PM Last Post By: Dan Barclay
Ederson Selvati

Posts: 34
Registered: 12/2/10
Intraweb + SSL  
Click to report abuse...   Click to reply to this thread Reply
  Posted: Sep 12, 2017 1:42 PM
Hi

How do I use SSL with IW XIV? I have a .pfx certificate, how to instruct IW to use it? ServerController has some attributes in SSLOptions, but I don't know what put there. Is there any docs about it?

Thanks

Ederson Selvati

Daniel Fields

Posts: 622
Registered: 11/29/04
Re: Intraweb + SSL  
Click to report abuse...   Click to reply to this thread Reply
  Posted: Sep 12, 2017 8:23 PM   in response to: Ederson Selvati in response to: Ederson Selvati
I have an old copy of SSL Buddy that I use to start the process, but it sounds like you already received your certificate. You can jump into the instructions below after it talks about generating the request.

SSL Buddy Instructions
Prepare an SSL Certificate for Intraweb Server

Generating CSR
http://www.techrepublic.com/blog/how-do-i/how-do-i-request-and-install-ssl-certificates-in-iis-70/

Before continuing, you must export a PFX file from your IIS server.

1. Run mmc.exe
2. Click the 'Console' menu and then click 'Add / Remove Snap-in'.
3. Click the 'Add' button and then choose the 'certificates' snap-in and click on 'Add'.
4. Select 'Computer Account' then click 'Next'.
5. Select 'Local Computer' and then click 'OK'.
6. Click 'Close' and then click 'OK'.
7. Expand the menu for 'Certificates' and click on the 'Personal' folder.
8. Right click on the certificate that you want to export and select 'All tasks' -> 'Export'.
9. A wizard will appear.
a. Make sure you check the box to include the private key and
b. Enter & confirm certificate password
c. Continue through with this wizard until you have a .PFX file.

Your cert.pem and key.pem files have been extracted. To create a root.pem file, please follow these
instructions. DO NOT FOLLOW SSLBUDDY FOR THIS STEP!!!

1. Open MMC and add the certificates snap-in.
2. Expand Console Root to
a. Intermediate Certificate Authorities
i. Certificates
3. Select "Go Daddy Secure Authority - G2".
a. Do not select the Go Daddy Root certificate!
4. Right-click and select Export
a. Select the Base 64 format
b. Save to root.crt
c. Rename root.crt to root.pem

Ederson Selvati

Posts: 34
Registered: 12/2/10
Re: Intraweb + SSL  
Click to report abuse...   Click to reply to this thread Reply
  Posted: Sep 13, 2017 4:10 AM   in response to: Daniel Fields in response to: Daniel Fields
Daniel Fields wrote:
I have an old copy of SSL Buddy that I use to start the process, but it sounds like you already received your certificate. You can jump into the instructions below after it talks about generating the request.

SSL Buddy Instructions
Prepare an SSL Certificate for Intraweb Server

Generating CSR
http://www.techrepublic.com/blog/how-do-i/how-do-i-request-and-install-ssl-certificates-in-iis-70/

Before continuing, you must export a PFX file from your IIS server.

1. Run mmc.exe
2. Click the 'Console' menu and then click 'Add / Remove Snap-in'.
3. Click the 'Add' button and then choose the 'certificates' snap-in and click on 'Add'.
4. Select 'Computer Account' then click 'Next'.
5. Select 'Local Computer' and then click 'OK'.
6. Click 'Close' and then click 'OK'.
7. Expand the menu for 'Certificates' and click on the 'Personal' folder.
8. Right click on the certificate that you want to export and select 'All tasks' -> 'Export'.
9. A wizard will appear.
a. Make sure you check the box to include the private key and
b. Enter & confirm certificate password
c. Continue through with this wizard until you have a .PFX file.

Your cert.pem and key.pem files have been extracted. To create a root.pem file, please follow these
instructions. DO NOT FOLLOW SSLBUDDY FOR THIS STEP!!!

1. Open MMC and add the certificates snap-in.
2. Expand Console Root to
a. Intermediate Certificate Authorities
i. Certificates
3. Select "Go Daddy Secure Authority - G2".
a. Do not select the Go Daddy Root certificate!
4. Right-click and select Export
a. Select the Base 64 format
b. Save to root.crt
c. Rename root.crt to root.pem


Thanks Daniel,

I will try your instructions.

I forgot to say, I'm using StandaAlone Server as Windows Service, is the same approach?

Thanks

Ederson
Daniel Fields

Posts: 622
Registered: 11/29/04
Re: Intraweb + SSL  
Click to report abuse...   Click to reply to this thread Reply
  Posted: Sep 13, 2017 8:44 AM   in response to: Ederson Selvati in response to: Ederson Selvati
Yes. I use those same deployment methods with those instructions.
Ederson Selvati

Posts: 34
Registered: 12/2/10
Re: Intraweb + SSL  
Click to report abuse...   Click to reply to this thread Reply
  Posted: Sep 20, 2017 5:07 AM   in response to: Ederson Selvati in response to: Ederson Selvati
Ederson Selvati wrote:
Daniel Fields wrote:
I have an old copy of SSL Buddy that I use to start the process, but it sounds like you already received your certificate. You can jump into the instructions below after it talks about generating the request.

SSL Buddy Instructions
Prepare an SSL Certificate for Intraweb Server

Generating CSR
http://www.techrepublic.com/blog/how-do-i/how-do-i-request-and-install-ssl-certificates-in-iis-70/

Before continuing, you must export a PFX file from your IIS server.

1. Run mmc.exe
2. Click the 'Console' menu and then click 'Add / Remove Snap-in'.
3. Click the 'Add' button and then choose the 'certificates' snap-in and click on 'Add'.
4. Select 'Computer Account' then click 'Next'.
5. Select 'Local Computer' and then click 'OK'.
6. Click 'Close' and then click 'OK'.
7. Expand the menu for 'Certificates' and click on the 'Personal' folder.
8. Right click on the certificate that you want to export and select 'All tasks' -> 'Export'.
9. A wizard will appear.
a. Make sure you check the box to include the private key and
b. Enter & confirm certificate password
c. Continue through with this wizard until you have a .PFX file.

Your cert.pem and key.pem files have been extracted. To create a root.pem file, please follow these
instructions. DO NOT FOLLOW SSLBUDDY FOR THIS STEP!!!

1. Open MMC and add the certificates snap-in.
2. Expand Console Root to
a. Intermediate Certificate Authorities
i. Certificates
3. Select "Go Daddy Secure Authority - G2".
a. Do not select the Go Daddy Root certificate!
4. Right-click and select Export
a. Select the Base 64 format
b. Save to root.crt
c. Rename root.crt to root.pem


Thanks Daniel,

I will try your instructions.

I forgot to say, I'm using StandaAlone Server as Windows Service, is the same approach?

Thanks

Ederson

Hi Daniel

I believe that this approach doesn't works with a A1 certificate, I guess I need a specific server certificate right?

I have downloaded the XCA certificate management http://sourceforge.net/projects/xca to generate the key.pem and cert.pem, but where do I put the reference to these files into IW? what is the CipherList, DHParamsFile properties?

Many questions right? Many doubts about it, maybe I need to understand better how the SSL works.

I read about using SSL with IIS, but, I don't use ISAPI. I use standalone/service application.

Regards

Ederson

Edited by: Ederson Selvati on Sep 20, 2017 6:52 AM
Ederson Selvati

Posts: 34
Registered: 12/2/10
Re: Intraweb + SSL  
Click to report abuse...   Click to reply to this thread Reply
  Posted: Sep 20, 2017 7:37 AM   in response to: Ederson Selvati in response to: Ederson Selvati
Ederson Selvati wrote:
Ederson Selvati wrote:
Daniel Fields wrote:
I have an old copy of SSL Buddy that I use to start the process, but it sounds like you already received your certificate. You can jump into the instructions below after it talks about generating the request.

SSL Buddy Instructions
Prepare an SSL Certificate for Intraweb Server

Generating CSR
http://www.techrepublic.com/blog/how-do-i/how-do-i-request-and-install-ssl-certificates-in-iis-70/

Before continuing, you must export a PFX file from your IIS server.

1. Run mmc.exe
2. Click the 'Console' menu and then click 'Add / Remove Snap-in'.
3. Click the 'Add' button and then choose the 'certificates' snap-in and click on 'Add'.
4. Select 'Computer Account' then click 'Next'.
5. Select 'Local Computer' and then click 'OK'.
6. Click 'Close' and then click 'OK'.
7. Expand the menu for 'Certificates' and click on the 'Personal' folder.
8. Right click on the certificate that you want to export and select 'All tasks' -> 'Export'.
9. A wizard will appear.
a. Make sure you check the box to include the private key and
b. Enter & confirm certificate password
c. Continue through with this wizard until you have a .PFX file.

Your cert.pem and key.pem files have been extracted. To create a root.pem file, please follow these
instructions. DO NOT FOLLOW SSLBUDDY FOR THIS STEP!!!

1. Open MMC and add the certificates snap-in.
2. Expand Console Root to
a. Intermediate Certificate Authorities
i. Certificates
3. Select "Go Daddy Secure Authority - G2".
a. Do not select the Go Daddy Root certificate!
4. Right-click and select Export
a. Select the Base 64 format
b. Save to root.crt
c. Rename root.crt to root.pem


Thanks Daniel,

I will try your instructions.

I forgot to say, I'm using StandaAlone Server as Windows Service, is the same approach?

Thanks

Ederson

Hi Daniel

I believe that this approach doesn't works with a A1 certificate, I guess I need a specific server certificate right?

I have downloaded the XCA certificate management http://sourceforge.net/projects/xca to generate the key.pem and cert.pem, but where do I put the reference to these files into IW? what is the CipherList, DHParamsFile properties?

Many questions right? Many doubts about it, maybe I need to understand better how the SSL works.

I read about using SSL with IIS, but, I don't use ISAPI. I use standalone/service application.

Regards

Ederson

Edited by: Ederson Selvati on Sep 20, 2017 6:52 AM

My IW is the Standard Version, SSL Encryption is not a feature.

Thanks Daniel

Ederson

Edited by: Ederson Selvati on Sep 20, 2017 9:27 AM
Dan Barclay

Posts: 889
Registered: 11/9/03
Re: Intraweb + SSL  
Click to report abuse...   Click to reply to this thread Reply
  Posted: Sep 20, 2017 12:53 PM   in response to: Ederson Selvati in response to: Ederson Selvati
Ederson Selvati wrote:

My IW is the Standard Version, SSL Encryption is not a feature.

It sounds like you have found your immediate problem. Once you get Ultimate, here are some threads I've found on the subject previously:

https://forums.embarcadero.com/thread.jspa?threadID=118405&tstart=0
More recent info (9/17)
https://forums.embarcadero.com/thread.jspa?threadID=256300&tstart=0

Dan
Legend
Helpful Answer (5 pts)
Correct Answer (10 pts)

Server Response from: ETNAJIVE02