Search code examples
.netwindowswcfopensslcertificate

Self Signed Certificate in Windows without makecert?


We have a shrink wrap type Windows server application where we need to create a self signed certificate on the server to be used by some WCF web services. From our searches on the web, it appears that the makecert utility in the PlatformSDK from Microsoft cannot be distributed with our application, so we're looking for alternatives.

Does anyone know how to use OpenSSL to create a certificate and get it into the Windows LocalMachine certificate store? Or, alternatively is it straight forward to insert the certificate into the store in a .NET application and should we just create the certificate file with openssl? Any help/suggestions would be appreciated.


Solution

  • [Unfortunately, I can't comment on anything yet, so I'll post this as an answer.]

    I see that this post is a bit old, but I'm in a similar boat and I found this in the Visual Studio 2008 redist.txt file:

    Windows SDK Files
    
    Subject to the license terms for the software, the following files may be distributed unmodified:
    
    MageUI.exe
    Mage.exe
    Makecert.exe
    

    Not sure if something has changed (and if my interpretation is correct), but it looks like makecert.exe included as part of the Windows SDK, which is in-turn included as part of the VS2008 install can actually be redistributed.