Answer the question
In order to leave comments, you need to log in
How to make the client work with HTTPS without importing our certificate?
Good day.
The other day I experimented with generating self-signed ssl certificates.
This moment is beautifully depicted here.
The question arose, if I do not want (do not have) the ability to import Trusted CA into the browser / root certificates on the client machine, what are the ways to make the client download / trust the server without manually importing certificates?
Answer the question
In order to leave comments, you need to log in
No.
The trust verification scheme is very simple - the client checks the issuer of the certificate. If the publisher's certificate is in its root certificate database and is marked as trusted (for example, Mozilla requires a separate mark), then it trusts this certificate, if not, it does not.
The self-signed will be trusted only after manual entry into the browser database.
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question