TrustedNew-SelfSignedCertificate

[Otto]

----------------------------------------------------------
from SLACK
----------------------------------------------------------
Can you create a doc of how you did it?
Antonio Linares 09:49 Uhr
good morning: sonnig:
1. Create the TrustedNew-SelfSignedCertificate -CertStoreLocation Cert: \ LocalMachine \ My -DnsName "FiveTech Certificate Authority" -KeyUsage CertSign, CRLSign, DataEncipherment, DigitalSignature, KeyAgreement1.1 certificate. Point the thumbprint of the certificate (in this case 1C5DED4F0340FB7872A2EB9F36B8D3588F22F602) 2. Export private key and certificate $ pwd = ConvertTo-SecureString -String "1234" -Force -AsPlainText
Export-PfxCertificate -cert Cert: \ LocalMachine \ My \ 1C5DED4F0340FB7872A2EB9F36B8D3588F22F602 -FilePath root-authority.pfx -Password $ pwd
Export-Certificate -Cert Cert: \ LocalMachine \ My \ 1C5DED4F0340FB7872A2EB9F36B8D3588F22F602 -FilePath root-authority.crt3. Import the .crt to "Trusted Root Certification Authorities" 4. Create certificate signed with that Trusted $ rootcert = (Get-ChildItem -Path Cert: \ LocalMachine \ My \ 1C5DED4F0340FB7872A2EB9F36B8D3588F22F602)
New-SelfSignedCertificate -CertStoreLocation Cert: \ LocalMachine \ My -DnsName "fivetech" -Signer $ rootcert5. Select it in Bindings in IIS. And voila: zwinkern:
image.png
image.png
Antonio Linares 09:57 Uhr
image.png
image.png
Charly: palme: 10:07 Uhr
Account for all this to serve, plis: leichtes_lächeln:
Antonio Linares 10:16 Uhr
Suppose a client wants us to make a web app using mod_harbour but wants the application to work using https
So we generate a certificate for free and we can start using the app by https

[Jonathan Hodder]

To explain this further https provides encrypted data transfer across the internet when the customer accesses their own data from the server.
I find this good reference

https://www.cloudflare.com/learning/ssl/why-use-https/

For example Internet banking always uses https otherwise it is a fake site.

To access the server database there is a firewall and user name and password (SQL).
For us this is still in the planning stage on top of the (FW)mod_harbour software development.

Bring on mod_harbour

[Otto]

Hello Jonathan,
I use APACHE server and mod harbour on my systems and SSL Certificates from Namecheap.
This is working fine.

I copied the post becouse this is for IIS server.


Best regards,
Otto

[Jonathan Hodder]

Yes i follow your posts. Still getting up to speed on this.

No doubt I shall ask further questions on Slack at time progresses

All the best
Jonathan