About ssl/https certificate

Today I really want to say that the common problem of Chinese people is that they hide their skills that they think are good. The third party said that it must be HTTPS. I wanted to download it and configure it according to the operation document. It doesn't take ten minutes, but I was wrong. If you do it according to the operation document, you are a fool if you believe them 100%. The operation document issued by Tencent Cloud doesn't explain the most critical point at all. It's true. dog.

Below I will talk about the conditions for installing the ssl certificate:

1. Download and purchase an ssl certificate, this is a must,

2. IIS must have the function of ""url rewriting", not url redirection! Note that about url rewriting, you can search for http to https, and I won't say much here.

3. Bind your ssl certificate to the iis website. The https port defaults to 443, and the http defaults to 80. When binding your ssl certificate, you don't need to worry about port 80. Just keep it open. If not, bind it.

The https certificate does not require a hostname.

4. Cancel the check box in the ssl setting function of iis. This will generate a piece of code for the rewrite tag in your wenconfig file. This is generated by yourself after the ssl setting is done. There are also a lot of people who said they wrote it on the Internet. I am really convinced by these idiots.

According to the above operation, accessing your domain name will directly jump to the domain name starting with https.

Guess you like

Origin http://43.154.161.224:23101/article/api/json?id=326028134&siteId=291194637