SSL 1

[MikeL91]

Please help,

I have a ok knowledge of asp and a limited knowledge of IIS, I created a web-site mostly in asp for my boss, and now he wants me to make it SSL (the whole site). I need to know exactly what I need to do for this, and if I can even do it. the site is on our own server conected on a t1 line directly to the internet. it is a win 2000 server. I appreciate any suggestions / help.

-Mike

 

[Jackcipk]

Would that be too much overhead traffic to implement the SSL for the whole site. It's not about whether you can do it or not, it's about HOW
OK, Let's Do It !!!
jliu@Cipk.com

 

[lck092580]

I believe Jack is correct here. Unless u're doing very very simple stuff here.. i.e. serving up very small pages then sure.. go ahead and make the whole site secure.. but I highly doubt that ur pages would be so simple (or else it wouldn't be important enough to secure it rite?).

Securing ur whole site is actually very simple.. here's what I went through:

1. Generate a cert request with IIS's wizard (very simple)
2. Send the encrypted file it generates to a company like verisign.
3. Wait... wait some more..
4. Recieve encrypted file from verisign..
5. install it onto ur server..
6. replace all the pages u won't to be secure with https:// instead of the usual

http://.

And u're done. If u're running ISA then it's a little bit different.. let me know if u do.

As an advice.. i would definitly not suggest securing the whole site.. instead.. consider what pages u need to secure.. i.e. login page. Securing the whole site is indeed an easy way out and it would probably work if u're only getting a few ppl accessing the site.. but if more comes ur SERVER is going to CRAWL like a turtle.. and i mean BIG TIME..

So do some planning .. i'm sure u'll figure what's important to secure and what is not. Good luck.

T