Take the 2-minute tour ×
Webmasters Stack Exchange is a question and answer site for pro webmasters. It's 100% free, no registration required.

I have an application developed using asp.net 2.0 and the goal is to make the webpage secure by using the https protocol.

I have searched all over the internet for some insight on how to accomplish this, and I have read about certificates, and so on, but couldn't quite figure this out yet.

So my question is, how can I accomplish this?

Explain this to me as if I didn't know anything about https.

I am using IIS 6.0 and ASP.NET 2.0.

share|improve this question

migrated from stackoverflow.com May 30 '11 at 15:09

This question came from our site for professional and enthusiast programmers.

2  
To me this question sounds like: I don't want to invest time, please do it for me. If you really do find nothing regarding HTTPS, see this Wikipedia entry. –  Uwe Keim May 30 '11 at 9:34
1  
fits better on serverfault.com –  cularis May 30 '11 at 9:35
    
Don't know whether you host your website on your own server or not, but if you're using a hosting services out there, they should be able to help you install everything. –  Arief Iman Santoso May 30 '11 at 9:37
add comment

1 Answer 1

Http over SSL - To accomplish this you will need a Signed Certificate. For a development purpose you can use Self Signed Certificate.

Here is an article on how to achieve this:

http://www.iis-aid.com/articles/how_to_guides/creating_self_signed_certificates_iis

Once you have the certificate ready, you will have to map it to the website and you should be good to go.

On a Production System, if you are using a Shared Hosting, generally the Shared Hosting providers give you a folder location or ability to map folders for Https from Control Panel. For a VPN/Dedicated Server, you will get/purchase the certificate from a Signing Authority and do the same step of mapping it to the IIS server.

Hope this helps.

share|improve this answer
    
The objective of the application is to be deployed on various servers when it's finished. Does this mean that i will need to have more than one certificate? –  seth May 30 '11 at 9:44
    
Then you are reffering a load balanced / Web Farm environment. Here are the instruction for how to set the environment up.. Also remember to mention this while getting the signed certificate from the certificate authority : support.microsoft.com/kb/313299 –  sajoshi May 30 '11 at 9:47
    
What i quite don't understand is what the certificate does exactly. –  seth May 30 '11 at 10:34
    
What the certificate does is say that this server with this name, such as example.com is the server that was originally given the certificate. It's possible to fool a web browser that your fake server is example.com, but it's not possible for you to create a fake certificate. –  paulmorriss May 31 '11 at 8:28
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.