Arch Linux

mezoko

Member

Registered: 2005-03-26

Posts: 310

Website

Creating "Valid" SSL Cert

Hi.
I have a small webserver and I want to run ssl for my webmail and I created a ssl cert by running

openssl req -new -x509 -keyout server.pem -out server.pem -days 365 -nodes

Firefox 2, and IE 7 both give me a nice warning that the cert might not be valid. Firefox 3 (cvs) however completely blocks from going the site. So how can I make a "valid" ssl cert?

Thanks!

---

"The only thing we have to fear is fear itself." - Franklin D. Roosevelt

byte

Member

From: Düsseldorf (DE)

Registered: 2006-05-01

Posts: 2,046

Re: Creating "Valid" SSL Cert

It's perfectly valid, just not trusted. You could go and shell out some bucks to Thawte, Verisign or the likes. If it's just for yourself forget about it and simply click that "remember" checkbox (or whatever it is called).

---

1000

mezoko

Member

Registered: 2005-03-26

Posts: 310

Website

Re: Creating "Valid" SSL Cert

Hmm... I guess I'll just have to figure out a way to get firefox3 to bypass it annoying block. There appears to be no option to accept the untrusted certificate.

---

"The only thing we have to fear is fear itself." - Franklin D. Roosevelt

iphitus

Forum Fellow

From: Melbourne, Australia

Registered: 2004-10-09

Posts: 4,927

Re: Creating "Valid" SSL Cert

Hmm... I guess I'll just have to figure out a way to get firefox3 to bypass it annoying block. There appears to be no option to accept the untrusted certificate.

That's odd. Check the options in firefox, otherwise file a bug at their bugzilla.

Last edited by iphitus (2007-10-26 01:20:25)

mezoko

Member

Registered: 2005-03-26

Posts: 310

Website

Re: Creating "Valid" SSL Cert

Well I found how to do it...

To override the error, you need to create an exception. The SSL exception dialog is located in the Preferences window, under Advanced/Encryption/View Certificates. Once there, click on the Servers tab, and then on "Add Exception...". The UI should be straightforward from there.

It suppose to be a new feature, but I do hope they add some button to easily add a cert or else I'm afraid the user base might drop drastically as there are many sites that have "untrusted" ssl certs.

For those interested in seeing what the error looks like... http://mezoko.net/stuff/fxsslcerterror.png

---

"The only thing we have to fear is fear itself." - Franklin D. Roosevelt

luca

Member

From: Rome

Registered: 2005-10-30

Posts: 280

Re: Creating "Valid" SSL Cert

Hi mezoko,
if you want a valid certificate for free visit www.cacert.org
I used it for a web site without any problem

Last edited by luca (2007-10-26 05:49:08)