In a web application used within an intranet, we want sensitive information be still sent thru SSL. We generated a server certificate by 'keytool' and configured it for tomcat. The problem is, as the application is not a public web site, we will not obtain a formal certificate from any CA. Now whenever SSL is used the browser always prompts a warning message saying the server certificate is invalid (because the server certicate cannot be verified by some real CA).
Is there any simple method to get rid of this warning message in IE?
I've seen some VBScript that can load a self-signed certificate into the certificate registry, all the user has to do is visit the page. Good 'ol Microsoft. I can't find it but maybe you can search the net for the script (it embeds the certificate as a Base64 encoded string), I'll try to remeber to ask at work.
1) Export you certificate as PKCS-7 format to a file. 2) Base64 the contents. 3) paste the Base64 contents into the 'credentials' below (you'll have many more lines than this), save the page and load it in IE 4) Click 'yes' and 'yes' when prompted. 5) Certificate should be loaded, verify by viewing the encrypted site.
Note that as mentioned in the HTML below, it is possible to do this using the 'add certificate' wizard, but this is painfl when you need to explain it to multiple users.