.net 4.0 Httplistener w/ https support
===

Seems to be a lot of conflicting, sometimes confusing, information with regards to making a .net HTTPListener https capable. My understanding is as follows:

* ones c# code needs an https prefix (ex. https://*:8443) in order for the listener to understand it needs to service SSL requests at this port. 

* the actual SSL handshake happens under the covers and is handled by http.sys (buried somewhere on the windows machine). The C# code doesn't have to explicitely manage the ssl handshake, it happens
under the covers.

* one needs to have a "x509 trusted certificate" on the httpListener machine, and somehow that certificate needs to be bound to port 8443 (in this example) 

Is my understanding above correct ?? If not, please educate me.

Regarding x509 certificates, my understanding is:

* use makecert to create a x509 certificate. This certificate gets stored in the personal store and needs to get moved over to the Trusted Store (this is where the http listener will look). Seems I can use certMgr to perform the move, or I can use mmc to effect the move. Seems there is more then 1 x509 cert format (DER,Base64,pks,pswd protected pks private etc)..Is there a preferred format I should use ??

Once I get the cert into the trusted store, I need to bind it to the tcp port. I am on win7, should be using httpcfg or netsh ??

Any tips/advice would be appreciated.

thanks,
wk