blocks|key|1028532|text|命名空间不包含用于此功能的API，因此您必须使用它的ConfigurationMethod来调用执行此函数的Win+API的扩展。类似于：|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|1028533|string+certificateHash+=+<hash>
string+certificateStore+=+<storename>++#my,+localmachine,+etc

ConfigurationMethod+method+=+binding.Methods["AddSslCertificate"];
ConfigurationMethodInstance+mi+=+method.CreateInstance();
mi.Input.SetAttributeValue("certificateHash",+certificateHash);
mi.Input.SetAttributeValue("certificateStoreName",+certificateStore);
mi.Execute();|code-block|syntax|javascript|1028534|entityMap^0|Q|J|0|0^^$0|@$1|2|3|4|5|6|7|M|8|@$9|N|A|O|B|C]]|D|@]|E|$]]|$1|F|3|G|5|H|7|P|8|@]|D|@]|E|$I|J]]|$1|K|3|-4|5|6|7|Q|8|@]|D|@]|E|$]]]|L|$]]

The namespace doesn't contain an API for this, so you have to use its <code>ConfigurationMethod</code> to invoke an extension to the Win API that performs this function. Something like:

<pre><code>string certificateHash = &lt;hash&gt;
string certificateStore = &lt;storename&gt; #my, localmachine, etc

ConfigurationMethod method = binding.Methods["AddSslCertificate"];
ConfigurationMethodInstance mi = method.CreateInstance();
mi.Input.SetAttributeValue("certificateHash", certificateHash);
mi.Input.SetAttributeValue("certificateStoreName", certificateStore);
mi.Execute();
</code></pre>

blocks|key|2584909|text|有一个方法重载用于添加绑定，该绑定将正确地将证书添加到HTTP.sys，请参阅：http://msdn.microsoft.com/en-us/library/bb355650(v=VS.90).aspx|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|2584910|您还可以选择实际设置绑定设置：|2584911|binding.CertificateHash和binding.CertificateStoreName，在执行时将正确地向HTTP.sys：属性(v=VS.90).aspx注册。|2584912|entityMap|0|LINK|mutability|MUTABLE|url|http://msdn.microsoft.com/en-us/library/bb355650(v=VS.90).aspx|1|http://msdn.microsoft.com/en-us/library/microsoft.web.administration.binding_properties(v=VS.90).aspx^0|14|1Q|0|0|0|1Z|G|1|0^^$0|@$1|2|3|4|5|6|7|R|8|@]|9|@$A|S|B|T|1|U]]|C|$]]|$1|D|3|E|5|6|7|V|8|@]|9|@]|C|$]]|$1|F|3|G|5|6|7|W|8|@]|9|@$A|X|B|Y|1|Z]]|C|$]]|$1|H|3|-4|5|6|7|10|8|@]|9|@]|C|$]]]|I|$J|$5|K|L|M|C|$N|O]]|P|$5|K|L|M|C|$N|Q]]]]

There is a method overload for adding Bindings that will add the certificate to HTTP.sys correctly, see: <a href="http://msdn.microsoft.com/en-us/library/bb355650(v=VS.90).aspx" rel="noreferrer">http://msdn.microsoft.com/en-us/library/bb355650(v=VS.90).aspx</a>

Optionally you can actually set the binding settings:

binding.CertificateHash and binding.CertificateStoreName and when commiting it will register correctly with HTTP.sys:
<a href="http://msdn.microsoft.com/en-us/library/microsoft.web.administration.binding_properties(v=VS.90).aspx" rel="noreferrer">http://msdn.microsoft.com/en-us/library/microsoft.web.administration.binding_properties(v=VS.90).aspx</a>

blocks|key|2584956|text|Bindings.Add()方法具有传递SSL证书的重载。如果您已经有了SSL证书，可以从SSL证书存储区中选择它，如下所示：|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|2584957|var+store+=+new+X509Store(StoreName.My,+StoreLocation.LocalMachine);
store.Open(OpenFlags.OpenExistingOnly);
var+certificate+=+store.Certificates.Find(X509FindType.FindByThumbprint,+the+thumbprint+for+the+key",+true);

var+site+=+_mgr.Sites[name];
site.Bindings.Add("*:4043:",+certificate[0].GetCertHash(),+"MY");|code-block|syntax|javascript|2584958|运行代码后，可以通过从命令行运行此代码来检查它是否正常工作：|2584959|netsh+http+show+sslcert|2584960|entityMap|0|LINK|mutability|MUTABLE|url|http://msdn.microsoft.com/en-us/library/bb355650%2528v=VS.90%2529.aspx^0|0|E|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|U|8|@]|9|@$A|V|B|W|1|X]]|C|$]]|$1|D|3|E|5|F|7|Y|8|@]|9|@]|C|$G|H]]|$1|I|3|J|5|6|7|Z|8|@]|9|@]|C|$]]|$1|K|3|L|5|F|7|10|8|@]|9|@]|C|$G|H]]|$1|M|3|-4|5|6|7|11|8|@]|9|@]|C|$]]]|N|$O|$5|P|Q|R|C|$S|T]]]]

The <a href="http://msdn.microsoft.com/en-us/library/bb355650%28v=VS.90%29.aspx" rel="noreferrer">Bindings.Add()</a> method has an overload for passing in the SSL certificate. If you already have a SSL certificate, you can select it from the SSL certificate store like this:

<pre><code>var store = new X509Store(StoreName.My, StoreLocation.LocalMachine);
store.Open(OpenFlags.OpenExistingOnly);
var certificate = store.Certificates.Find(X509FindType.FindByThumbprint, the thumbprint for the key", true);

var site = _mgr.Sites[name];
site.Bindings.Add("*:4043:", certificate[0].GetCertHash(), "MY");
</code></pre>

Once you have run the code, you can check that it has worked by running this from the command line:

<pre><code>netsh http show sslcert
</code></pre>

blocks|key|1028705|text|如果您需要证书散列(即一台具有各种SSL证书的机器上的多个if+)，则需要知道如何获取证书/散列。下面的几行演示了如何找到信息，因为MSDN文档对于这个主题来说太差了。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1028706|--您不能使用ServerManager.OpenRemote()远程更新SSL绑定--这似乎存在一个错误。Appcmd也帮不了你。|offset|length|style|BOLD|1028707|如果要将字节字符串转换回字节数组(如果您知道哈希)，则这是怎么做的|1028708|static+void+Main(string[]+args)
{
++++var+store2+=+new+X509Store(StoreName.TrustedPublisher,+StoreLocation.LocalMachine);
++++Console.WriteLine("TrustedPublisher:");
++++PrintCerts(store2);
++++Console.WriteLine();+

++++Console.WriteLine("MY:");
++++store2+=+new+X509Store(StoreName.My,+StoreLocation.LocalMachine);
++++PrintCerts(store2);
++++Console.WriteLine();

++++Console.WriteLine("CertificateAuthority:");
++++store2+=+new+X509Store(StoreName.CertificateAuthority,+StoreLocation.LocalMachine);
++++PrintCerts(store2);
++++Console.WriteLine();
}

static+string+PrintHash(byte[]+cert)
{
++++StringBuilder+builder+=+new+StringBuilder();

++++foreach+(byte+b+in+cert)
++++{
++++++++builder.AppendFormat("{0:x2}",+b);
++++}

++++return+builder.ToString();
}

static+void+PrintCerts(X509Store+store)
{
++++store.Open(OpenFlags.OpenExistingOnly);
++++foreach+(var+cert+in+store.Certificates)
++++{
++++++++Console.Write("{0}+-+{1}",+cert.FriendlyName,+PrintHash(cert.GetCertHash()));
++++++++Console.WriteLine();
++++}
}|code-block|syntax|javascript|1028709|示例输出：|1028710|我的：
www.awesomesite.com+-+cc2b5fc8216a949b58aadc21089c12b2c090f6bd|blockquote|1028711|entityMap|0|LINK|mutability|MUTABLE|url|https://stackoverflow.com/questions/321370/convert-hex-string-to-byte-array^0|0|0|1U|0|R|6|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|11|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|12|8|@$D|13|E|14|F|G]]|9|@]|A|$]]|$1|H|3|I|5|6|7|15|8|@]|9|@$D|16|E|17|1|18]]|A|$]]|$1|J|3|K|5|L|7|19|8|@]|9|@]|A|$M|N]]|$1|O|3|P|5|6|7|1A|8|@]|9|@]|A|$]]|$1|Q|3|R|5|S|7|1B|8|@]|9|@]|A|$]]|$1|T|3|-4|5|6|7|1C|8|@]|9|@]|A|$]]]|U|$V|$5|W|X|Y|A|$Z|10]]]]

As Helephant's answer is the best if you need the certificate hashes (i.e. multiple IPs on a single machine with various SSL certs), you'll need to know how to get the certificates/hashes. The few lines below demonstrate how to find the information out, as the MSDN documentation is so poor for this subject.

You can't remotely update an SSL binding using ServerManager.OpenRemote() - there appears to be a bug with this. Appcmd won't help you either.

If you want to convert a byte string back into a byte array (if you know the hash), <a href="https://stackoverflow.com/questions/321370/convert-hex-string-to-byte-array">here's how.</a>

<pre><code>static void Main(string[] args)
{
 var store2 = new X509Store(StoreName.TrustedPublisher, StoreLocation.LocalMachine);
 Console.WriteLine("TrustedPublisher:");
 PrintCerts(store2);
 Console.WriteLine(); 

 Console.WriteLine("MY:");
 store2 = new X509Store(StoreName.My, StoreLocation.LocalMachine);
 PrintCerts(store2);
 Console.WriteLine();

 Console.WriteLine("CertificateAuthority:");
 store2 = new X509Store(StoreName.CertificateAuthority, StoreLocation.LocalMachine);
 PrintCerts(store2);
 Console.WriteLine();
}

static string PrintHash(byte[] cert)
{
 StringBuilder builder = new StringBuilder();

 foreach (byte b in cert)
 {
 builder.AppendFormat("{0:x2}", b);
 }

 return builder.ToString();
}

static void PrintCerts(X509Store store)
{
 store.Open(OpenFlags.OpenExistingOnly);
 foreach (var cert in store.Certificates)
 {
 Console.Write("{0} - {1}", cert.FriendlyName, PrintHash(cert.GetCertHash()));
 Console.WriteLine();
 }
}
</code></pre>

Example output:

<blockquote>
 MY: 
 www.awesomesite.com - cc2b5fc8216a949b58aadc21089c12b2c090f6bd
</blockquote>

blocks|key|2225885|text|添加泰勒·伯德的评论，但使用powershell：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|2225886|++++...
Write-Verbose+("Remove+old+certificate+[+{0}+]...+"+-f+$SiteHttpsBinding.GetAttributeValue("certificateHash"))
$BindingMethod=$SiteHttpsBindings.Methods["RemoveSslCertificate"]
$BindingMethodInstance=$BindingMethod.CreateInstance()
$BindingMethodInstance.Execute()
Write-Verbose+("Add+new+certificate+[+{0}+]..."+-f+$AfterThumbprint)
$BindingMethod=$SiteHttpsBindings.Methods["AddSslCertificate"]
$BindingMethodInstance=$BindingMethod.CreateInstance()
$BindingMethodInstance.Input.SetAttributeValue("certificateHash",+$AfterThumbprint)
$BindingMethodInstance.Input.SetAttributeValue("certificateStoreName",+"My")
$BindingMethodInstance.Execute()
...|code-block|syntax|javascript|2225887|上面的代码片段对于更新证书非常有用，而不需要删除整个绑定。我使用它在本地和远程机器上添加和更新ssl绑定。|2225888|谢谢伯德先生提供WinAPI参考资料。|2225889|entityMap^0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|M|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|N|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|O|8|@]|9|@]|A|$]]|$1|I|3|J|5|6|7|P|8|@]|9|@]|A|$]]|$1|K|3|-4|5|6|7|Q|8|@]|9|@]|A|$]]]|L|$]]

Adding to Taylor Bird's comment but using powershell:

<pre><code> ...
Write-Verbose ("Remove old certificate [ {0} ]... " -f $SiteHttpsBinding.GetAttributeValue("certificateHash"))
$BindingMethod=$SiteHttpsBindings.Methods["RemoveSslCertificate"]
$BindingMethodInstance=$BindingMethod.CreateInstance()
$BindingMethodInstance.Execute()
Write-Verbose ("Add new certificate [ {0} ]..." -f $AfterThumbprint)
$BindingMethod=$SiteHttpsBindings.Methods["AddSslCertificate"]
$BindingMethodInstance=$BindingMethod.CreateInstance()
$BindingMethodInstance.Input.SetAttributeValue("certificateHash", $AfterThumbprint)
$BindingMethodInstance.Input.SetAttributeValue("certificateStoreName", "My")
$BindingMethodInstance.Execute()
...
</code></pre>

The above code snippet is useful for updating certificates without needing to remove the whole binding. I've used it for adding and updating ssl bindings on local and remote machines. 

Thanks Mr. Bird for supplying the WinAPI reference.

blocks|key|2585043|text|如果您来到这里，并且希望使用PowerShell来完成这一任务，我会给出一个相当完整的答案，这里。如果您知道要使用的证书的散列，最简单的答案是这样做：|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|2585044|cd+IIS:\SslBindings
get-item+Cert:\LocalMachine\My\XFX2DX02779XFD1F6F4X8435A5X26ED2X8DEFX95+%7C+New-Item+0.0.0.0!443|code-block|syntax|javascript|2585045|entityMap|0|LINK|mutability|MUTABLE|url|https://serverfault.com/questions/560037/add-a-binding-to-an-iis-site-using-powershell^0|1A|2|0|0|0^^$0|@$1|2|3|4|5|6|7|Q|8|@]|9|@$A|R|B|S|1|T]]|C|$]]|$1|D|3|E|5|F|7|U|8|@]|9|@]|C|$G|H]]|$1|I|3|-4|5|6|7|V|8|@]|9|@]|C|$]]]|J|$K|$5|L|M|N|C|$O|P]]]]

If you landed here and are wanting to use PowerShell to accomplish this, I put a fairly complete answer <a href="https://serverfault.com/questions/560037/add-a-binding-to-an-iis-site-using-powershell">here</a>. The simplest answer, if you know the hash of the certificate that you want to use is to do this:

<pre><code>cd IIS:\SslBindings
get-item Cert:\LocalMachine\My\XFX2DX02779XFD1F6F4X8435A5X26ED2X8DEFX95 | New-Item 0.0.0.0!443
</code></pre>

blocks|key|1028804|text|我觉得在这的回答中突出德瓦特的评论是很重要的。似乎有一个错误阻止了证书更改的发生，如果没有看到这个注释，我就不会解决它。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|1028805|如果将绑定信息设置为自身，则会导致IIS绑定证书。下面是一个简单的例子：|1028806|binding.BindingInformation+=+binding.BindingInformation;|style|CODE|1028807|entityMap|0|LINK|mutability|MUTABLE|url|https://stackoverflow.com/a/5149291/4662037^0|4|1|0|0|0|0|1K|0^^$0|@$1|2|3|4|5|6|7|R|8|@]|9|@$A|S|B|T|1|U]]|C|$]]|$1|D|3|E|5|6|7|V|8|@]|9|@]|C|$]]|$1|F|3|G|5|6|7|W|8|@$A|X|B|Y|H|I]]|9|@]|C|$]]|$1|J|3|-4|5|6|7|Z|8|@]|9|@]|C|$]]]|K|$L|$5|M|N|O|C|$P|Q]]]]

I feel like it's important to highlight Devator's comment in <a href="https://stackoverflow.com/a/5149291/4662037">this</a> answer. There appears to be a bug that prevents the certificate changes from taking place and I would never have solved it without seeing this comment.

If you set the binding information to itself, this causes IIS to bind the certificate. A quick example is shown below:

<code>binding.BindingInformation = binding.BindingInformation;</code>

So the Microsoft.Web.Administration API is very easy to use to create HTTP and HTTPS bindings for sites:

<pre><code>using (ServerManager manager = new ServerManager())
{
 Site site = manager.Sites[siteName];
 site.Bindings.Clear();
 site.Bindings.Add("*:80:", "http");
 site.Bindings.Add("*:443:", "https");

 manager.CommitChanges();
}
</code></pre>

But the HTTPS binding is pretty meaningless without the SSL certificate. How can I go about programatically choosing a cert file and using it with the HTTPS binding, using this API?

Install SSL certificate programmatically using Microsoft.Web.Administration

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋

腾讯云代码助手

云原生构建

TAPD 敏捷项目管理

Cloud Studio

SDK中心

API中心

命令行工具

涵盖代码开发、场景应用、自动测试全流程，助你从零构建专属AI助手

一站式MCP教程库，解锁AI应用新玩法

因此，HTTPS非常容易用于为站点创建HTTPS和HTTPS绑定：using (ServerManager manager = new ServerManager()){    Site site = manager.Sites[siteName];    site.Bindings.Clear();    site....

问使用Microsoft.Web.Administration以编程方式安装SSL证书
EN

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问使用Microsoft.Web.Administration以编程方式安装SSL证书EN