Re: How to Get IE to Trust My Certificate?
From: GibMaster (gibmaster@gibs.org)
Date: 11/04/02
- Next message: GibMaster: "Re: Issuing client certificates"
- Previous message: GibMaster: "Re: Issuing client certificates"
- In reply to: Steve: "Re: How to Get IE to Trust My Certificate?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "GibMaster" <gibmaster@gibs.org> Date: Mon, 4 Nov 2002 08:43:50 -0500
No clue. Is it looking for the CRL? Why it would be connecting to someone
other than you is beyond me...
I couldn't figure out how to make the browser automatically install the CA
cert either. I think it's something you have to do manually at each client
who wants to trust your CA.
You can download the CA cert from the /certsrv pages on the CA. (If it
weren't for that damn ActiveX control...)
"Steve" <pearsons_11112@mindspring.com> wrote in message
news:af4801c2837a$cfb30560$3bef2ecf@TKMSFTNGXA10...
> Yep, I figured that part out after some more messing
> around. I explicitly imported the CA cert. However, the
> way it's supposed to work when importing the site cert is
> to check the the CA and then presumably allow you to
> decide whether to trust it (implicitly importing the CA
> cert). This appears to be breaking down because it can't
> connect to the CA. The odd thing is that when I attempt to
> view the imported site cert it tries to make an http
> connection to www.mydomain.com, apparently a commercial
> registration outfit. Any thoughts? Thanks!
>
> >-----Original Message-----
> >You're getting the "Company not trusted" warning? Are
> you installing the
> >site cert or the server cert? Is your CA listed in IE
> under "Trusted Root
> >Certification Authorites"? If not, you'll need to
> install your CA as a
> >trusted root to make that go away.
> >
> >You can download the CA cert from the enrollment site:
> >http://YOUR.SERVER.NAME/certsrv Select "Retrieve the CA
> certificate"
> >
> >
> >"Steve" <pearsons_11112@mindspring.com> wrote in message
> >news:592701c28369$ec22e5f0$3aef2ecf@TKMSFTNGXA09...
> >> This might seem like an IE question, but it seems more
> >> likely to get answered here. I am trying to get IE to
> >> trust the certificate I have created with my own
> >> certification authority. I get the popup that says the
> CA
> >> is not trusted, I view the certificate. It says to
> enable
> >> trust, install this certificate in the trusted root
> >> certification authorities store. I do this, explicitly
> >> choosing the trusted root. It says the import succeeds,
> >> but then the certificate is not visible from the trusted
> >> root list. If I allow it to choose the store
> >> automatically, it works, but it puts in the intermediate
> >> store. In this case I still get the popup message every
> >> time. Has anyone done this successfully? Is there any
> >> documentation for this stuff that goes into this an any
> >> depth? TIA.
> >>
> >
> >
> >.
> >
- Next message: GibMaster: "Re: Issuing client certificates"
- Previous message: GibMaster: "Re: Issuing client certificates"
- In reply to: Steve: "Re: How to Get IE to Trust My Certificate?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
