Configuring IIS site to use HTTPS
I am developing a REST API which I want to secure with SSL/TLS. I have implemented a large part of the API which I have tested over HTTP, however, I am now at the stage where I want to switch it over to use HTTPS.
At the moment the API is hosted on a Windows XP professional SP2 box running IIS 5.1 (development environment only) and I used the
SelfSSL.exe tool from the IIS 6.0 Resource Kit Tools to generate a server certificate. I then configured my API to use this certificate which all appeared to work fine as I attempted to connect to my API using HTTP and I get a
403 response saying "... must be accessed over a secure channel...". However, the problem is when I then attempt to access the API over HTTPS it just appears to hang!
As this is a development environment at the moment I don't have a domain name (just a static IP address) and the API is running on port
81. Also (incase it matters) the API is the default site (I replaced it).
Any ideas why I can't connect using HTTPS?