How to encrypt an HTTPS site?

Question

IIS

Good time of the day. Interested in a list of necessary software to protect the site and users from data spoofing.
There is: web site with https (self-signed certificate) Local network with users.
Do: Protect the transfer of data from the user to the site.
Options:
1) Raise IPSEC from a cryptopro CA (very expensive)
2) issue a certificate for the server and issue 100500 certificates for clients

How to do the second option?

Answer 1

In https, the data is already encrypted. I did not understand the point of issuing 100500 certificates for clients! If only for authorization on the site by certificate.

Answer 2

Do: Protect the transfer of data from the user to the site.
Options:
1) Raise IPSEC from a CA from a cryptopro (very expensive)
2) issue a certificate for the server and issue 100500 certificates for clients

3) Stunnel
4) VPN
5) htpasswd

How to make the second option?

Try to tame easy-rsa for your purposes.