如何为IIS 6创建自签名通配符SSL证书? [英] How to create a self-signed wildcard SSL certificate for IIS 6?
问题描述
我正在尝试创建一个自签名的通配符SSL证书，以供运行IIS 6的许多开发和测试服务器使用.按照各种指南，已产生了两种生成证书的方法，但是我没有使它工作的任何运气.我使用过的最成功的方法是此OpenSSL指南，并像下面这样使用makecert.exe:
I'm trying to create a self-signed wildcard SSL certificate for use on a number of development and test servers running IIS 6. Following various guides has led to a couple ways of generating the certificates, but I haven't had any luck getting it to work. The most successful ways I've had were following this OpenSSL guide and using makecert.exe like so:
makecert.exe -r -b 01/01/2009 -e 01/01/2042 -sr LocalMachine -ss MY -a sha1 -n CN="*.example.com" -sky exchange -pe -eku 1.3.6.1.5.5.7.3.1 -sy 12 -sp "Microsoft RSA SChannel Cryptographic Provider" wildcard.cer
两者均生成IIS 6会接受的证书，但是当我实际尝试查看站点时，在firefox中收到以下错误:
Both of which generate certificates that IIS 6 will accept, but when I actually try to view the site I get the following error in firefox:
数据传输中断
页面加载时，与dev.example.com的连接中断.
Data Transfer Interrupted
The connection to dev.example.com was interrupted while the page was loading.
IE只是给出:
Internet Explorer无法显示网页
最可能的原因:
Internet Explorer cannot display the webpage
Most likely causes:
- 您未连接到互联网.
- 网站遇到问题.
- 地址中可能存在输入错误.
- You are not connected to the Internet.
- The website is encountering problems.
- There might be a typing error in the address.
无论我尝试通过域名，计算机名称，本地主机，本地ip还是回送ip访问它，都会发生此错误.
This error happens whether I try to access it by domain name, machine name, localhost, local ip, or loopback ip.
那么...我如何创建IIS 6可以使用的自签名通配符证书?或者如何解决已经创建的问题?
So...how can I create a self-signed wildcard cert that IIS 6 will work with? Or how can I fix the problems I'm experiencing with the ones I've already created?
推荐答案
您可以使用MS提供的IIS 6资源工具包，MS是一个称为SelfSSL的命令行应用程序.它可以生成SSL密钥并将其导入到您的IIS安装中.
You can use the IIS 6 Resource Kit provided by MS, an command line app called SelfSSL. It can generate the SSL key and import it into your IIS installation.
这篇关于如何为IIS 6创建自签名通配符SSL证书?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！
