First to be released applet background services need to meet the following criteria:
① services domain name must be filed Https sites to support the two domain names do not support IP address plus port name
② Second Deployment Services server system environment must support TLS1.2 more
A, Https sites
Need to convert ordinary Http Https site to site, you need to ssl certificate, the certificate is bound directly onto your site, way of obtaining a certificate are the following:
Http website will need to have the following ways:
(1) Ali Tencent cloud or cloud to apply, because the only valid for one year, you need to replace re-apply after the expiration, too much trouble, do not talk here
(2) ssl certificate purchase fee, this simple to use, but the general ssl certificate price is not low, not recommended
Today, we mainly want to say is that third way, using Letencrypt free installation of the certificate, the certificate is valid, although he offers only three months, but he was able to provide a certificate Automatic Updates service:
DETAILED operation portion played as follows:
1. First we download download from https://github.com/Lone-Coder/letsencrypt-win-simple/releases install automatic update tool and unzip
2. Because the installation process needs to generate verification documents at the site, so please enter administrator mode cmd interface, you can right-click on the Start menu Command Prompt (Admin) option
3. Go to the unpack folder, run letsencrypt.exe --san command
4. automatically after the execution of IIS all sites listed under, behind there are several options:
5. several options corresponding to different situations here because my machine has several sites, I want to give them a certificate issued uniform, I chose S , then it will prompt you to install the site number, and here I input 3,4
6. Next it creates in each site where a verification file to verify that it will generate the corresponding certificate to pass after IIS , if you will create in Task Manager under all normal circumstances of a regular update task.
If you still do not understand, refer to:
http://www.cnblogs.com/osscoder/p/6423885.html
Second, the environmental system TLS1.2 settings
First ensure that computer systems support TLS1.2 , refer to the following table
The system of support, but still tips the wrong version, you can do the following, go to Baidu network disk download: https: //pan.baidu.com/s/13a6-NitoeVEHu9R5eJxZoA extraction code: q3hn , download the file will copy to the server, and then click, restart the computer after installation.