Home / server / Questions / 210124
Accepted
zam6ak
Asked: 2010-12-08 12:05:43 +0800 CST

Generating self-signed, wildcard certificate for IIS 7.5 on .local domain

  • 772

Is it possible to generate self signed, wild-card ssl certificate for internal domain on IIS 7.5 for testing purposes. For example I'd like common name to be *.domain.local

Similar question for IIS 6 was posted here, but without clear answer (in my opinion)

iis iis-7.5 certificate ssl-certificate

3 Answers

  1. If you have a certificate authority on your internal domain, then yes. You can then generate whatever certificates that you need for internal use.

    • 0
  2. Best Answer

    Your question actually did end up getting answered in that question here; You cannot create a Wildcard SSL certificate through IIS7+'s self-issued certificate system.

    • 0

  3. The certificate question isn't actually related to IIS.

    If you create any self-signed certificate with intended purposes EKUs including Server Authentication, it'll work with IIS.

    So all you really need to do is create that certificate, then convince all the clients to trust it too.

    You can use the old SelfSSL tool to create the cert, at least:

    http://blogs.iis.net/chrisad/archive/2006/11/14/windows-server-2003-service-pack-1-and-iis-6-0-host-headers-and-ssl.aspx

    selfssl /s:{SiteId} /N:cn="*.contoso.com" /q

    You should be able to skip the /s:{SideID} part, to just generate a local certificate, then hook it up through the IIS 7 InetMgr console as usual.

    Aside: If you've got the metabase compatibility pack and IIS 6 scripts installed, you may be able to use the Site ID and have it set up for you, exactly as per the instructions there.

    • 0