Setting up TLS/SSL encryption on Omnis web app on Windows/IIS

[Alex Clay]

Hi Das,

Unless you need to market strong SSL (ecommerce, etc.) I recommend a free certification through Let's Encrypt <https://letsencrypt.org <https://letsencrypt.org/>>.

For a paid certificate that verifies your organization/domain's legitimacy, I recommend instantSSL <https://www.instantssl.com <https://www.instantssl.com/>>.

Alex

> On Jun 26, 2020, at 10:31, Das Goravani <das at goravani.com> wrote:
> 
> Mayada and all,
> 
> How do you get your certificates.. what’s a good source?
> 
> 
> 
>> On Jun 26, 2020, at 5:49 AM, malkishtini <malkishtini at gmail.com> wrote:
>> 
>> Hi Geert,
>> 
>> Thank you so much for sharing the steps below.
>> I know all the steps..I'm only missing this part
>>>>>> add the certificate to the IIS Server (https://www.digicert.com/ssl-support/certificate-pfx-file-export-import-iis-10.htm#import-pfx)
>> 
>> I'll read it and hopefully I'll found out what went wrong with my testing when I was using an existing certificate that was already added to the server
>> I don't use the default web site, I create a web site for the Omnis app and I have a domain for the site.
>> I have many other sites (.net web apps) configured on the IIS on the test server that I'm using, each of them uses a different certificate and maybe that is what breaking my testing.
>> 
>> The link above at least will confirm the steps that I should following to apply the certificate to my website.
>> I was thinking that I was missing some configuration changes on a config file on IIS or on Omnis side, apparently there is nothing.
>> 
>> Thank you and best regards,
>> Mayada
>> 
>> -----Original Message-----
>> From: omnisdev-en [mailto:omnisdev-en-bounces at lists.omnis-dev.com] On Behalf Of Geert Landuyt
>> Sent: Friday, June 26, 2020 2:32 AM
>> To: 'OmnisDev List - English'
>> Subject: RE: Setting up TLS/SSL encryption on Omnis web app on Windows/IIS
>> 
>> All of steps:
>> 
>> -	create directory c:\inetpub\executables
>> 
>> -	In IIS Manager :
>> 	-	Add Virtual directory with alias cgi-bin for c:\inetpub\executables
>> 	-	Choose Handler Mappings 
>> 		- Add Module Mapping : omnisapi.dll and executable c:\inetpub\executables\omnisapi.dll with Feature Permissions Execute checked
>> 		- Repeat this step for omnisrest if needed and specify executable c:\inetpub\executables\omnisrestapi.dll
>> 	-	DefaultAppPool, Advanced Settings, make sure 32-Vit enabled is set to False
>> 
>> -	Install Omnis Web Server
>> 
>> -	copy .htm files to c:\inetpub\wwwroot 
>> 	-	make sure data-webserverurl is modified to "/cgi-bin/omnisapi.dll"
>> 	-	make sure data-omnisserverandport is modified to "5912" or whatever port is set in your Omnis Web Server   (by default IIS listens on ports 80 and 443)
>> -	copy needed icons, css, images and scripts files in the appropriate c:\inetpub\wwwroot folders
>> 
>> 
>> -	acquire a (domain-wide) certificate
>> -	add the certificate to the IIS Server (https://www.digicert.com/ssl-support/certificate-pfx-file-export-import-iis-10.htm#import-pfx)
>> -	Default Web Site, option Bindings...
>> 	- Edit Site Binding for port 443 and select the SSL certificate.
>> 	- there is a View button as well to check Issued and Validity perio
>> 
>> Traffic will go secured to the IIS web server and all other traffic to the Omnis Web Server is local.
>> My setup: Windows Server 2016, Omnis Web Server 8.1.7
>> 
>> Regards,
>> Geert
>> 
>> -----Original Message-----
>> From: omnisdev-en <omnisdev-en-bounces at lists.omnis-dev.com> On Behalf Of malkishtini
>> Sent: Friday, 26 June 2020 04:20
>> To: 'OmnisDev List - English' <omnisdev-en at lists.omnis-dev.com>
>> Subject: Setting up TLS/SSL encryption on Omnis web app on Windows/IIS
>> 
>> Hi $all,
>> 
>> I’m searching for a tech note or a doc that explains the steps to setup a "secured" Omnis web app (JS client and Ultra-thin client); i.e. change the web app from running with HTTP to HTTPS on IIS.
>> I found this tech notes https://ftp.omnis.net/technotes/tnws0004.jsp but it seems to be for adding authentication to a restfulAPI, not sure if that also applies to Omnis web apps, I have no tried it yet.
>> 
>> I thought to check with the list first instead of working in the dark without knowing what I'm doing.
>> 
>> Anyone in this list has any link to a document that can help guiding me thru this? Or has any notes that help?
>> 
>> Thank you so much in advance for any hints, Mayada
>> 
>> 
>> _____________________________________________________________
>> Manage your list subscriptions at http://lists.omnis-dev.com Start a new message -> mailto:omnisdev-en at lists.omnis-dev.com 
>> _____________________________________________________________
>> Manage your list subscriptions at http://lists.omnis-dev.com
>> Start a new message -> mailto:omnisdev-en at lists.omnis-dev.com 
>> 
>> _____________________________________________________________
>> Manage your list subscriptions at http://lists.omnis-dev.com
>> Start a new message -> mailto:omnisdev-en at lists.omnis-dev.com 
> 
> _____________________________________________________________
> Manage your list subscriptions at http://lists.omnis-dev.com
> Start a new message -> mailto:omnisdev-en at lists.omnis-dev.com