A
A
Andrey Grinevich2016-12-23 13:54:18
Digital certificates
Andrey Grinevich, 2016-12-23 13:54:18

How to make the client work with HTTPS without importing our certificate?

Good day.
The other day I experimented with generating self-signed ssl certificates.
This moment is beautifully depicted here.
The question arose, if I do not want (do not have) the ability to import Trusted CA into the browser / root certificates on the client machine, what are the ways to make the client download / trust the server without manually importing certificates?

Answer the question

In order to leave comments, you need to log in

1 answer(s)
C
CityCat4, 2016-12-23
@CityCat4

No.
The trust verification scheme is very simple - the client checks the issuer of the certificate. If the publisher's certificate is in its root certificate database and is marked as trusted (for example, Mozilla requires a separate mark), then it trusts this certificate, if not, it does not.
The self-signed will be trusted only after manual entry into the browser database.

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question