CODEWITHSUNDEEP
sslopenssl
user605596
user605596

Reputation: 259

Creating SSL sertificate with trusted CA

I'm not quite sure if this question applies to this forum but if it does maybe someone knows if it is possible using Open SSL to create a SSL sertificate that browsers wouldn't throw warning messadges that our created SSL sertificate is untrusted?

Upvotes: 1

Views: 457

Answers (2)

dlev
dlev

Reputation: 48606

This is probably better handled on server fault, but I will tell you that NO you cannot do this. The reason browsers don't like your certificate is that you are not a recognized certificate authority. As such, a browser will always warn about your certificate being untrustworthy, since the browser does not know who you are, or why anyone should trust you.

EDIT: As Alex K points out, you can install your certificate on machines you know will access your site, which works reasonably well for scenarios where the site will only be accessed by a limited number of known users/machines. My point still stands regarding wider distribution. Thanks, Alex.

Upvotes: 1

Eugene Mayevski 'Callback
Eugene Mayevski 'Callback

Reputation: 46094

Technically it is possible if you have CA's private key to sign the newly created certificate. As you probably don't have a key, the answer is probably no. Just go ahead and purchase a certificate from one of CAs. If you do minimal research, you will find that some CAs offer very affordable prices.

Upvotes: 1

Related Questions