====== Set HTTPS and login ======

==== General ====

For the setup of HTTPs you need 
  * a certificate. 
  * the ID((GUID - Here you can easily create any one you like, e.g.: via [[https://www.guidgenerator.com/]])) of the application,
  * the port to which the web page is bound and 
  * netsh.

=== help: I have no (app)ID === 
All you need for registration is a free GUID. You can have this generated, for example, via https://www.guidgenerator.com/.

=== Configure HTTPS === 
Together with the certificate and the application ID((Example our ID)) of eBiss you bind the certificate to the port on which the web page is configured. If the "Web server event listener" is set to port 7081, then for example

<code>netsh http add sslcert ipport=0.0.0.0:7081 certhash=f9812f7474517e9a9e0880e400dde22264676f3e appid={88B495F4-E5AF-4F39-BD6E-40E9894502DA}</code>

The Service (eBiss.Service.exe) has the ID {88B495F4-E5AF-4F39-BD6E-40E9894502DA}, the 32 Bit Service (eBiss.Service32.exe) has the ID {E4417B73-1F08-4C18-B740-976230EA7E5C}.

The registered certificates can be displayed by :
<code>netsh http show sslcert</code>


=== Update certificate === 

Check and note IPPORT and APPID:
<code>netsh http show sslcert</code>

Delivers e.g:
<code>
    IP:Port : 0.0.0.0:8443 <- IPPORT
    Certificate hash : 26fe0d63b21e29a53470e2d6657c031f893a0e18 <- ALTER CERT FINGERPRINT
    Application ID : {0f2a6365-7088-45en-be49-440c36b18ffc} <- APPID 
    Certificate Store Name : (zero)
    ...
</code>

Delete the previous certificate on the stored IPPORT:
<code>netsh http delete sslcert ipport=0.0.0.0:8443</code>

Install the certificate with a new fingerprint:
<code>netsh http add sslcert ipport=0.0.0.0:8443 certhash=45caceba6f456c1dacbe278703bd2a70ed003ea6 appid={0f2a6365-7088-45de-be49-440c36b18ffc}</code>


==== Forms / Domain Login ===

The Web Server Event Listener is used to configure whether the logon takes place via user and password or via the Windows Domain Login.

See also:
  * [[https://docs.microsoft.com/en-us/dotnet/framework/wcf/feature-details/how-to-configure-a-port-with-an-ssl-certificate ] How to: Configure a Port with an SSL Certificate]]
  * [[https://docs.microsoft.com/de-de/archive/blogs/james_osbornes_blog/selfhosting-a-wcf-service-over-https ]Selfhosting a WCF service over Https]]