When building my ASP.NET Core apps, I usually enable the RequireSSL filter in production environments. But I’ve never went through getting it to work on my dev box as I thought it was harder than it actually was.

Another project is a.net standard library. But if I open visual studio, then open Package manager console, wait for it to load and then open the project then it works.

Effectively to get SSL running, I thought I needed to get involved in creating and handling certificates. Not really true.

Using IISExpress

If you’re developing in Visual Studio 2015 and running on Windows, enabling SSL is really easy. Just open your project settings and look on the Debug tab. You’ll see a checkbox to enable SSL in IIS Express (make sure you have “IIS Express” selected in “Profile”

Microsoft office for mac os x 10.8.5. Delta updates only include the patches since the last update version. Downloading and running which restarts your Mac and puts it right back to 10.8.5 makes the issue vanish.Combo updates are Apple’s version of their latest patches and also include all previous updates for that operating system. If Google Chrome, Microsoft Office 2011 applications like Word, Excel, Powerpoint & Outlook or other third party apps start crashing or hanging immediately at launch after upgrading your Mac to the new version of Mountain Lion, Mac OS X 10.8.5, there is a quick fix that can avoid troubleshooting.There appears to be an issue with the App Store update from 10.8.4 to 10.8.5 typically called a delta update.

With that enabled, you can open your project using the URL that is generated via SSL, but the certificate isn’t trust (e.g. it’s a self-signed cert). When you launch the app with HTTPS, you’ll get a warning from your browser. For example, in Chrome the screen looks like this:

If you click “Advanced”, it will let you open the connection (and it will remember to temporarily trust the cert):

Voila! Your site with SSL (note the indication that the certificate isn’t really safe):

This way you can test your site with SSL.

Without Using IISExpress

NOTE: If you’re on Windows, I can help. But if you’re running on a Mac you’re on your own. I am sure there are ways to do the same certificate generation there, but it’s not my area.

I wanted to be able to understand how Kestrel dealt with doing SSL. For my sites, Azure is doing the heavy lifting when I enable SSL so I’ve been able to avoid it for a long time.

Before you get started, you’ll need access to two tools that may already be installed on your Windows box: makecert and pvk2pfx. You can get these from the Windows SDK (look for the version for your Windows version here: http://shawnw.me/getwinsdk). I found mine at:

c:Program Files (x86)Windows Kits10binx64

We’re trying to get to a .pfx file that contains the certificate and the private key (You’ll need both to do SSL). First, we need to use makecert to create intermediate files:

Replace “YourFileName” with any name you want. The CN=XXX is just a name of whomever is going to be the owner of the cert, but since it’s not a real cert…just put whatever name you want. Running this will create the .pvk and .cer files. A popup will ask you for passwords for the cert and the key. Remember these passwords, you’ll need them for the next step.

Next, you’ll need to convert these files into the pfx format. To do that, use pvk2pkx:

The –pvk and and –spc flags are used to specify the files you created in the first step. The -pfx flag is to specify the name of the final pfx file. Adobe acrobat cc for mac. Finally, the –pi is where you’ll include the password you specified when you created the files with makecert.

You now have a pfx file that you can use to enable SSL. To do this, open your Program.cs. The trick is to load up the .pkx file as a X509 Certificate:

This loads up your cert and unlocks it so you can tell Kestrel to use it. So in your WebHostBuilder code, you can simply pass in a lambda and configure Kestrel to use HTTPS passing in the certificate:

You can specify the URL to listen to by using the UseUrls too. In this case, only running the project itself (not using IISExpress) will use this code and URL.

Now you can test your project with SSL!

Let me know if there is anything I missed…