Note that there are some explanatory texts on larger screens.

plurals
  1. PO
    primarykey
    data
    text
    <p>If you control all of the machines that will use these certificates, you can create a CA that's trusted by all of the machines, and then issue certificates based on that.</p> <p>Here are my batch files. The first one creates the CA certificate:</p> <pre><code>:// Create a self-signed certificate (-r), :// with an exportable private key (-pe), :// using SHA1 (-r), for signing (-sky signature). :// The private key is written to a file (-sv). makecert -r -pe -n "CN=My Root Authority" -ss CA ^ -sr CurrentUser -a sha1 -sky signature -cy authority ^ -sv CA.pvk CA.cer </code></pre> <p>Import the .CER file into the CA certificate store on those machines that must connect to the server (they must trust the CA):</p> <pre><code>:// Import that certificate into the :// "Trusted Root Certification Authorities" store. certutil -user -addstore Root CA.cer </code></pre> <p>This one creates a server certificate:</p> <pre><code>:// Create a server certificate, with an exportable private key (-pe), :// using SHA1 (-r) for key exchange (-sky exchange). :// It can be used as an SSL server certificate (-eku 1.3.6.1.5.5.7.3.1). :// The issuing certificate is in a file (-ic), as is the key (-iv). :// Use a particular crypto provider (-sp, -sy). makecert -pe -n "CN=server.example.com" -a sha1 ^ -sky exchange -eku 1.3.6.1.5.5.7.3.1 -ic CA.cer -iv CA.pvk ^ -sp "Microsoft RSA SChannel Cryptographic Provider" -sy 12 ^ -sv server.pvk server.cer pvk2pfx -pvk server.pvk -spc server.cer -pfx server.pfx </code></pre> <p>Install the .pfx file, and then get the C# server code to use it. This is left as an exercise for the reader.</p>
    singulars
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    plurals
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. VO
      singulars
      1. This table or related slice is empty.
    2. VO
      singulars
      1. This table or related slice is empty.
    3. VO
      singulars
      1. This table or related slice is empty.
    1. This table or related slice is empty.
 

Querying!

 
Guidance

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload