Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

How to create a trusted self signed SSL certificate

Tags:

https

ssl

I create a self signed certificate in IIS7.5 and I am getting an error that follows

    There is a problem with this website's security certificate. 


 The security certificate presented by this website was issued for a different website's address.

Security certificate problems may indicate an attempt to fool you or intercept any data you send to the server.  
  We recommend that you close this webpage and do not continue to this website.  
  Click here to close this webpage.  
  Continue to this website (not recommended).  
     More information 


If you arrived at this page by clicking a link, check the website address in the address bar to be sure that it is the address you were expecting. 
When going to a website with an address such as https://example.com, try adding the 'www' to the address, https://www.example.com. 
If you choose to ignore this error and continue, do not enter private information into the website. 

For more information, see "Certificate Errors" in Internet Explorer Help.

How to fix this error?

like image 365
Karthik Malla Avatar asked Jul 05 '11 10:07

Karthik Malla


People also ask

Can I generate my own SSL certificate?

If you need an official SSL certificate, you send it to an official certificate authority (CA). They use the CSR to generate an official certificate. We, however, will use this request to generate a certificate ourselves, a self-signed certificate.

How do I trust an SSL certificate?

If you want to turn on SSL/TLS trust for that certificate, go to Settings > General > About > Certificate Trust Settings. Under "Enable full trust for root certificates," turn on trust for the certificate.


1 Answers

Its not an error its a warning, the certificate you generated is not trusted by the browser.

To supress this on machines you control you can add the certificate to the trusted root CA store (Example).

If this machine is on the internet/accessed by machines you do not control, you cannot alter this behaviour unless you purchase a cert from a trusted issuing CA.

like image 187
Alex K. Avatar answered Oct 02 '22 18:10

Alex K.