I have a ASP.NET web application host on Windows Server 2008 IIS7, everythings work well.
I want to deny the user without SSL cert install in browser (IE/Firefox etc)
for example, there are 10 staffs allow to access this website. I had do the following.
- Using OpenSSL generate a pkcs12 cert (*.pfx)
- Using IIS Server Manager install the pfx.
- bind the site to https and select the server cert installed on (2.)
- On the Sites -> SSL Settings -> checked the require SSL w/require selection.
It seem works, IIS response:
403 - Forbidden: Access is denied. You do not have permission to view this directory or page using the credentials that you supplied.
but how can i generate the ssl cert for these 10 users to install to their browser? using OpenSSL seem cannot generate *.crt from *.pfx.