~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
From: "DArain" <jinxx@s...>
Subject: [security_asp] SSL


: I'm just experimenting a bit to try and see if I can make my online order
: system. Now I want to implement a SSL secured connection but I don't know
: how to do this, or where to start. Ive got IIS 5.
: I read through other posts and came up with the following:
:
: 1. get a certificate (is there a way to get this for free??? I've seen
: the prices and its not worth it for me.)
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Generate your certificate request, and send it to your own certificate
server, and generate your own certificate. The user will see an warning
message though, since your certificate server is not automatically trusted
by the browser (unlike, say, Verisign's).

Eg, see:
http://support.microsoft.com/support/kb/articles/Q218/4/45.ASP
for directions with WinNT Server and IIS v4 and Certificate Server

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
: 2. put all the files that will be transmitted into another directory that
: will be SSL secured.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

You need the certificate. That is used to secure the transmission. You
choose which folders/files require a secure connection. You still need the
certificate to secure the transmission.

Cheers
Ken