Chapter 5
Using SSL protection with
Custom Web Publishing
The Secure Sockets Layer (SSL) protocol is a standardized method for allowing encrypted and
authenticated communication between web servers and web browsers. Encryption through SSL
converts information being exchanged between web servers and web browsers into unintelligible
information through the use of mathematical formulas known as ciphers. These ciphers are used to
transform the information back into understandable data by the intended recipient through
encryption keys.
The actual instruments used to provide SSL protection are termed
SSL certificates.
SSL server
certificates satisfy the need for confidentiality, integrity, and authentication. These certificates form
the basis of an Internet trust infrastructure by allowing web sites to offer safe, secure information
exchange to their customers. Server certificates are the first step to setting up an SSL environment,
and are available from independent, third party Certificate Authorities (CAs), such as VeriSign
(www.verisign.com).
CAs issue certificates to individuals, organizations, and web sites. To implement SSL you must
request and then install a digital certificate on a web server. You can enable SSL capabilities after
the certificate has been successfully installed.
SSL server certificates fulfill two necessary functions:
SSL server authentication to allow web users to verify a web server's identity. Web browsers
automatically check to see if a server's certificate and public ID are valid and have been issued by
a certificate authority (CA).
SSL encryption to allow a secure channel of communication that enables information sent
between a web browser and a web server to be encrypted, preventing information from being
intercepted over the Internet. SSL encryption also monitors the integrity of the data being sent over
the Internet and determines whether it has been altered in any way during transit. This allows
information to be sent securely and confidentially.
Note
SSL protection is only available to users of Custom Web Publishing with FileMaker Pro
Unlimited software, and only through the use of the FileMaker Web Server Connector (FMWSC)
and third party web server software, such as Microsoft Internet Information Server (IIS).
Example: Configuring SSL with Microsoft IIS
Part 1: Generating a private key pair and Certificate Signing Request (CSR)
1.
In Microsoft IIS, open Administrative Tools and then the Internet Services Manager. Right click
and select
Properties
for the web site you want.