Comments on "Using Makecert to Create Certificates for Development"

PaleLocust commented on "Using Makecert to Create Certificates for Development"

PaleLocust — Thu, 06 May 2010 20:46:09 GMT

First, nice blog.

Second, thanks for this post. I had about 75% of the steps down. I was missing the pvk2pfx and a couple other aspects, and it looks like now I've got what I needed.

Thanks
Nate

Hammad commented on "Using Makecert to Create Certificates for Development"

Hammad — Wed, 19 May 2010 14:33:36 GMT

Awesome Post. Really helped me creating self-signed certificated for testing

Nicholas Piasecki commented on "Using Makecert to Create Certificates for Development"

Nicholas Piasecki — Wed, 01 Sep 2010 12:39:09 GMT

Great post! Really helpful.

hchattaway commented on "Using Makecert to Create Certificates for Development"

hchattaway — Sun, 24 Oct 2010 15:57:52 GMT

Great post, answered a lot of questions!

Still have one issue though..

I am creating a wcf service that needs a certificate for encryption...It will be hosted in IIS. After creating the cert, i had read it needs to be given ASPNET permissions to function properly in this environment... is that the case?

Thanks
Harold

Digambar Kandangire commented on "Using Makecert to Create Certificates for Development"

Digambar Kandangire — Thu, 31 Mar 2011 06:30:36 GMT

Great explanation! Thanks.

Polo commented on "Using Makecert to Create Certificates for Development"

Polo — Thu, 07 Apr 2011 13:33:34 GMT

Hi all,
I am facing a problem. Let me explain

I have a rootCA certificate generated using this commandline
makecert -pe -sky signature -sr localmachine -n "CN=RootTrustedCA" -ss ROOT -r RootTrustedCA.cer

This is a part of a batch file that runs when we set up the server and the RootTrustedCA certificate sits under trusted sites of local machine in mmc.

Now we generate another certificate(%ComputerName%) for IIS binding on the server machine using makecert -sk %COMPUTERNAME% -ss MY -sky exchange -sr localmachine -n "CN=%COMPUTERNAME%" -ic RootTrustedCA.cer -is ROOT -e 01/01/2028 %COMPUTERNAME%.cer

Now on the client machines, we need to connect to this server machine and we need the RootTrustedCA to authorise our server. Hence I export the RootTrustedCA certificate along with the private key using the standard procedure from mmc as a .pfx file and import it to the client machine's mmc under local machine->trusted Root certificate. So far so good
Now I create a client certificate named Pablo on the client machine using the rootTrustedCA using this commandline
makecert -ss MY -sky exchange -sr currentuser -n "CN=Pablo" -in RootTrustedCA -is ROOT -e 01/01/2028

Pablo certifciate is generated and placed under Currentuser->Personal->certificates and also shows issuer to be RootTrustedCA

But then when we try to connect using IE from client to server as http://servername remember servername here is (%ComputerName%), we dont connect. It throws http 403 error i.e. forbidden.

I am not able to understand this . I have a limitations....I dont have a pvk file for RootTrustedCA so cant use it and yet have to get all this working.

In some websites I read that pfx files should not be imported to local machine -> trusted root certificate store .....Is that correct ? However i tried importing it to current user->personal(as mentioned in those sites) but that also didnt solve my connection problem.

Can any of you please guide me on this issue. I believe generation of rootTrustedCA certificate on server machine and then exporting and furthur importing on client machine is perfectly fine. I feel Some issue is there in my pablo certificate generation on client machine . My connection code logs that certificate was found successfully. Please pour in some thoughts on this issue.

Waiting eagerly to here from u soon on this

jailhousejoe commented on "Using Makecert to Create Certificates for Development"

jailhousejoe — Wed, 16 Nov 2011 11:34:40 GMT

succint and well explained - thankyou your work was a great help

Amit commented on "Using Makecert to Create Certificates for Development"

Amit — Wed, 29 Feb 2012 10:42:55 GMT

Great Blog Suppeeerrrrr like....:)

5arx commented on "Using Makecert to Create Certificates for Development"

5arx — Thu, 14 Jun 2012 10:36:11 GMT

A great post. I've been searching for this information for a day and a half now. Thanks very much!

Satish commented on "Using Makecert to Create Certificates for Development"

Satish — Fri, 29 Jun 2012 22:04:46 GMT

Really helpful post.

Cheers....

kernel commented on "Using Makecert to Create Certificates for Development"

kernel — Thu, 06 Sep 2012 18:11:01 GMT

Very useful post! Thanks a lot.
Step by step with detailed explanation! great job!

Peter Porfy commented on "Using Makecert to Create Certificates for Development"

Peter Porfy — Wed, 27 Feb 2013 17:38:54 GMT

Great explanation, thanks!