Shulou(Shulou.com)06/02 Report--

Lab preparation: a virtual machine for Windows server 2008 R2

The purpose of the experiment (why use HTTPS):

The difference between HTTP and HTTPS: the background of HTTPS: the data transmitted by HTTP protocol is unencrypted, that is, plaintext, so it is very insecure to use HTTP protocol to transmit private information. In order to ensure that these private data can be encrypted, Netscape designed SSL (Secure Sockets Layer) protocol to encrypt the data transmitted by HTTP protocol, thus giving birth to HTTPS. Because the Web server needs to obtain a server certificate to enable SSL and bind the certificate to the server that will use SSL, in terms of application, https needs to apply for a certificate from CA (Certification Authority) and generally has to pay for it; in terms of connection, http connection is simpler and more efficient. Overall, http is more efficient and https is more secure.

The steps of the experiment:

1. Configure CA Certificate Server

① start menu-> Manager-> Server Manager-> add roles

② check "Active Directory Certificate Service", next step

③, next step.

④ adds required role services

⑤, next step.

⑥ specifies the installation type, "Enterprise"-- > "next"

"Enterprise" needs domain environment

"independent" does not require a domain environment

⑦, next step.

⑧ create a new private key-- > next

⑨ Select encryption Service provider: "RSA#Microsoft Software Key Storage Privoider"

Key character length: "2048"

Select the hash algorithm for the signing certificate issued by this CA: SHA1-- > "next"

⑩, next step.

(11) check the items necessary to run the Asp.Net website, and click "next"

(12) installation

two。

Create a new self-signed certificate and configure HTTPS

① select the IIS root node, find the "server certificate" in the function view, and enter

② find the previously configured CA, "adserv-PORSCHEV-CA", and click "create self-signed Certificate"

③ enter a name for the self-signed certificate

④ re-add website to IIS-binding type: Https-- port number is 443 by default (can not be modified)-- SSL certificate choose self-signed certificate-- "OK".

⑤ runs "Default.aspx" in IIS

⑥ "continue to browse this site"

⑦ Click browser "Certificate error"-"View Certificate"

⑧ issues this item with a value of "porschev.adserv.com"

You can also visit the website at URL: https://porschev.adserv.com:8000/

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.