Re: Securing Webservice

The issue here is that your browser doesn't trust the certificate. IE isn't
installing a certificate when it gives you a warning, it is just telling you
it doesn't trust the certificate. In order to get the client to trust it,
you need to put the root certificate in the client's root certificate store.

Note that you'll need to do that for every client that will access the
server. If that is a lot of clients, you might want to consider a
certificate from a public CA. If they are all members of your domain, then
you can deploy an enterprise CA to get that root automatically installed on
each domain member.

Joe K.

--
Joe Kaplan-MS MVP Directory Services Programming
Co-author of "The .NET Developer's Guide to Directory Services Programming"
http://www.directoryprogramming.net
--
"Bob" <bob@xxxxxxxxxxx> wrote in message
news:O$qmzYYHHHA.1240@xxxxxxxxxxxxxxxxxxxxxxx
Hi,
I am new to web admin and security.
Made a certificate server out of the development Win2k server and created
a
root certificate.
The same machine is also the web server for now.
Updated the Web site directory properties to require SSL
When I query the site from a browser on the LAN it brings up the
certificate
question and the certificate install appears to go OK. The WSDL doc for my
service then appears
However if I start a new browser window it asks the certificate question
again.

Any clues as to where I am going wrong?
thanks
Bob




.

Relevant Pages

  • Re: Security Certificate Trust Problem
    ... It would be easy to check that by unchecking the checkboxes for cert revocation at: ... "The security certificate was issued by a company you have not ... I have never chosen not to trust this "company" ... trusts and installing it in Trusted section does not override the Untrusted ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Music and Arts website question
    ... I find that if I use my browser to select a secure page at the ... However, the security certificate ... When you access to a website that uses SSL, ... decide whether to trust that the server is who it claims to be. ...
    (rec.music.classical.recordings)
  • Re: Security Certificate Trust Problem
    ... It really sounds like the cert is revoked to me. ... "The security certificate was issued by a company you> have ... > 1) I have never chosen not to trust this "company" ... > 3) I did try installing the certificate as Trusted and the Wizard> reported ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Music and Arts website question
    ... When you access to a website that uses SSL, your browser asks the server to present its digital certificate and validates two things: ... If either of these are not true, you get a warning and it's up to you to decide whether to trust that the server is who it claims to be. ...
    (rec.music.classical.recordings)
  • Re: How to starthandshake with client browser??
    ... > And then what should i do to handshake with browser? ... Please see my other post in this thread pointing you to WebScarab. ... getting the browser to trust your certificate. ...
    (comp.lang.java.programmer)