10

I am serving web pages inside LAN with my own certificate, signed by my own CA. Chrome warns connection is not trusted with the following details:

enter image description here

I am trying to add inthemoon-ca to Trusted Root Certification Authorities by various ways and the process goes well, but has no final effect on web page: it is still reported as untrusted.

How to fix?

UPDATE

Chrome Version is 51.0.2704.103 m (64-bit)

Dims
  • 13,414

3 Answers3

11

certificate need to contain Subject Alternativ Name

I had a similar issue with our internal websites. I have certificate of my certification authority in computer root trusted store without no result. The main problem was in the little detail, my certificate doesnt contain section: Subject Alternativ Name. Google Chrome showing that error itself ["F12" ">>" "security"].

annygma
  • 111
3

Two things:

  1. You need to set the certificate as trusted within Windows's certificate store. Judging by your screen shot I'm assuming you're running Windows 8.

    Windows Server https://technet.microsoft.com/en-us/library/cc754841(v=ws.11).aspx

    Windows 8 (run certmgr.msc or certlm.msc and add the cert) Why is the local certificate store missing in Windows 8.1?

  2. You need to restart Chrome. This is from my experience.

Community
  • 1
Jesse Spears
  • 81
0

SSL can be added through various method, (download, deploy and etc.) At first you can check the certificate is already existed on pc that want to open page using chrome.

But As I know Google Chrome browser is based on global provider validation not local. it means global certficate and valid purchased SSL-Signed is required due to it. In fact this is not show Green at the first of url bar even you produce SSL signature to open site until it doesn't validate a purchase and global one.

So iF you mean "Not Showing Green", This can cause you can't trust it. but the other browsers doesn't obey such hard policy and validation method. Otherwise chrome works like as other browser with local ssl signiture by adding Exception or "I Agree" after clicking advance button when the page showed.

Ali Fanaei
  • 1