Create certificate let's encrypt with iis

Thanks Sir for your help.

when using etudiant.esprit.tn as host name in iis, I got:

how can I use the temporary domain name ?
Thanks a lot Sir.

Again, before you can create a certificate or set the hostname, you must create the DNS entry, as it has been described before. Without it, it will not work.

And a dig etudiant.esprit.tn @ns1.gnet.tn on my machine still does not give any results.

That name will continue to fail until DNS has been properly set for it:
*** resolver1-fs.opendns.com can’t find etudiant.esprit.tn: Non-existent domain
As far as the Internet is concerned IT DOESN’T EXIST (yet).

Here is a temporary name that does exist:
Name: temp20200511.dns0.ovh
Address: 193.95.99.145

But as I’ve mentioned several times, there are other things we need to talk about.
I will break it down so you under stand completely.
The URL you want to “secure” is:
http://etudiant.esprit.tn:8015/edt/
part #1 protocol = http
part #2 FQDN = etudiant.esprit.tn (not yet ready - will use temp name instead for now)
part #3 port = 8015
part #4 path = /edt/

Part #1 is linked to part #3.
If you are using HTTP on port 8015 then you can’t use HTTPS (on that same port).
You will have to use another port or switch 8015 from HTTP only to HTTPS only (no more HTTP on 8015).
[choose one]

If you are going to use another port (let’s call it 8016 until you decide), you will have to ensure the firewall/NAT router forwards port 8016 to your IIS server.

Part #2 needs to be dealt with ASAP

Part #4 plays no roll in this problem.

In addition, LE will need port 80 for HTTP authentication challenge.
That means port 80 needs to be used for HTTP - the firewall/NAT router needs to forward port 80 to your IIS server.

Ok Sir, but on my windows server, running nslookup -q=ns esprit.tn , I got:

thanks a lot Sir.

That is NOT relevant.
You need to get a real IP response for:
nslookup -q=a etudiant.esprit.tn
[from an Internet DNS server]

1 Like

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.