I need to host site in IIS for https protocol with IP address only rather then hostname

Question

0.00/5 (No votes)

See more:

I have one application in .net which i want to host on server which can access through IP(Not by Host name) only in HTTPS protocol. I have Self sign certificate if i am doing it with host name then its working. 

But As per Requirement i have to do it with IP only due to some security reasons. Is this possible to do? If yes then how can I do it?

What I have tried:

I have created application Pool, Site, SSL Certificate. If I am hosting it with only in Http mode then also its working but when I changed it to https it not working.

Posted 12-Jul-17 19:50pm

Tbs.User

Updated 12-Jul-17 22:35pm

Add a Solution

1 solution

Add a Solution

Add your solution here

Treat my content as plain text, not as HTML

Preview 0

…

Existing Members

Sign in to your account

...or Join us

Download, Vote, Comment, Publish.

Your Email
Password
Forgot your password?

Your Email
This email is in use. Do you need your password?
Optional Password

I have read and agree to the Terms of Service and Privacy Policy
Please subscribe me to the CodeProject newsletters

When answering a question please:

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

F-ES Sitecore · Answer 1 · 2017-07-12T22:35:00

Solution 1

I googled "https with ip address" and this was the first result

https - Is it possible to have SSL certificate for IP address, not domain name? - Stack Overflow[^]

Posted 12-Jul-17 22:35pm

F-ES Sitecore

Comments

Tbs.User 13-Jul-17 5:12am

Yes I already gone through this but not find it helpful. His requirement was to o avoid unnecessary cookies in request AND avoid additional DNS request. And mine is to provide more security over IP and even in that none of answer showing clear idea about solution. Even i can say if its possible or not. But when I am going to implement it its not working. If you know you can answer it. Otherwise even I can also Googled like this if I can get answer easily in this way then why should i write all this stuff.

F-ES Sitecore 13-Jul-17 5:16am

It doesn't matter that his motives differ from yours, he wants to do the same thing so the solution applies regardless.

Tbs.User 13-Jul-17 5:20am

But its not containing any answer How i can do it. Even i know Its possible. I also said what i tried and I know what need to do for that. But its now working for https. So for that I am asking no each and every body is saying its possible or not but no body answer how. So if you Know the answer then give it otherwise dont wast mine and yours valuable time.

F-ES Sitecore 13-Jul-17 5:25am

"Not working" doesn't give anyone enough information to help. You've probably either created the cert wrongly or configured IIS wrongly.

Tbs.User 14-Jul-17 6:09am

Now I am waiting for response after giving all details as you asked.

Tbs.User 13-Jul-17 5:43am

Okay I am giving full description what I am doing.

I have firstly create CARoot Certificate by Executing command file(CreateCARoot.cmd).
then opened MicroSoft management console and then import this certificate in Trusted Root Authorities.
CreateCARoot.cmd:
makecert.exe ^
-n "CN=CARoot" ^
-r ^
-pe ^
-a sha512 ^
-len 4096 ^
-cy authority ^
-sv CARoot.pvk ^
CARoot.cer

pvk2pfx.exe ^
-pvk CARoot.pvk ^
-spc CARoot.cer ^
-pfx CARoot.pfx ^
-po Test123

Then created Server Certificate by executing following file(CreateSslServerCert.cmd) then import this certificate in Trusted Root Authorities.

CreateSslServerCert.cmd:

makecert.exe ^
-n "CN=DemoApp1.com" ^
-iv CARoot.pvk ^
-ic CARoot.cer ^
-pe ^
-a sha512 ^
-len 4096 ^
-b 01/01/2015 ^
-e 01/01/2018 ^
-sky exchange ^
-eku 1.3.6.1.5.5.7.3.1 ^
-sv %1.pvk ^
%1.cer

pvk2pfx.exe ^
-pvk %1.pvk ^
-spc %1.cer ^
-pfx %1.pfx ^
-po Test123

same for Client but Import it in Personal
CreateSslClientCert.cmd :

makecert.exe ^
-n "CN=%1" ^
-iv CARoot.pvk ^
-ic CARoot.cer ^
-pe ^
-a sha512 ^
-len 4096 ^
-b 01/01/2014 ^
-e 01/01/2018 ^
-sky exchange ^
-eku 1.3.6.1.5.5.7.3.2 ^
-sv %1.pvk ^
%1.cer

pvk2pfx.exe ^
-pvk %1.pvk ^
-spc %1.cer ^
-pfx %1.pfx ^
-po Test123

then Install my server certificate. Opened IIS, Clicked on Server Certificates and Import my certificate in IIS and added site under https and given, Hostname Empty, with generated SSl Server Certificate. I have also given different ports and all are opened from firewall and if i running it with htttp then its working but not in https I hope this is enough information.

Richard Deeming 14-Jul-17 11:39am

What does "not working" mean? Do you get an error in the browser? Do you get any error logs on the server? Or on the firewall? Does the browser just "hang" trying to connect, and eventually time out? Something else?

Tbs.User 15-Jul-17 1:01am

Its showing me "Secure Connection Failed" error in browser.

Tbs.User 13-Jul-17 6:01am

Some links which i refer
1. https://community.letsencrypt.org/t/certificate-for-public-ip-without-domain-name/6082/2