我们在内部网中使用自签名证书。我需要做什么才能让ie8接受它们而不向用户显示错误消息?我们为ie7所做的工作显然不起作用。
编辑:如果我将证书放入受信任的根证书颁发机构,Internet Explorer 7将不会显示任何错误。即使有证书,ie8似乎也会显示错误。
我们在内部网中使用自签名证书。我需要做什么才能让ie8接受它们而不向用户显示错误消息?我们为ie7所做的工作显然不起作用。
编辑:如果我将证书放入受信任的根证书颁发机构,Internet Explorer 7将不会显示任何错误。即使有证书,ie8似乎也会显示错误。
当前回答
您可以使用CertMgr将证书添加为受信任的发行者,如果是自签名的,则添加为根证书
CertMgr.exe /add CertificateFileName.cer /s /r localMachine root
请参阅微软的文档:
https://learn.microsoft.com/en-us/windows-hardware/drivers/install/using-certmgr-to-install-test-certificates-on-a-test-computer
其他回答
如何在20个恼人的步骤中让IE8信任自签名证书
Browse to the site whose certificate you want to trust. When told “There is a problem with this website's security certificate.”, choose “Continue to this website (not recommended).” Select Tools➞Internet Options. Select Security➞Trusted sites➞Sites. Confirm the URL matches, and click “Add” then “Close”. Close the “Internet Options” dialog box with either “OK” or “Cancel”. Refresh the current page. When told “There is a problem with this website's security certificate.”, choose “Continue to this website (not recommended).” Click on “Certificate Error” at the right of the address bar and select “View certificates”. Click on “Install Certificate...”, then in the wizard, click “Next”. On the next page select “Place all certificates in the following store”. Click “Browse”, select “Trusted Root Certification Authorities”, and click “OK”. Back in the wizard, click “Next”, then “Finish”. If you get a “Security Warning” message box, click “Yes”. Dismiss the message box with “OK”. Select Tools➞Internet Options. Select Security➞Trusted sites➞Sites. Select the URL you just added, click “Remove”, then “Close”. Now shut down all running instances of IE, and start up IE again. The site’s certificate should now be trusted.
您应该将证书作为受信任的权威安装在计算机上。
有许多方法可以做到这一点,例如,您可以使用mmc (start/run/mmc),添加证书管理单元,然后从那里安装自签名证书。
这是没有办法的,因为证书的全部意义是警告用户,如果他正在访问的网站没有经过可信的权威机构的认证。
下面是我如何让它在IE8中工作的:
Go to the website in question, https://xxx.yyy.com, for instance, Click through until you get to the Certificate error in the browser status line. View the cert, then from the Details tab, select Copy to File. Save to the desktop as xxx.cer, for example, Start, Run, MMC. File, Add/Remove Snap-In, Select Certificates, Click Add, My User Account, then Finish, then OK, Dig down to Trust Root Certification Authorities, Certificates, Right-Click Certificate, Select All Tasks, Import, Select the Save Cert from the Desktop Select Place all Certificates in the following Store, Click Browse, Check the Box that says Show Physical Stores, Expand out Trusted Root Certification Authorities, and select Local Computer there, click OK, Complete the Import, Check the list to make sure it shows up. You will probably need to Refresh before you see it. Exit MMC, Open Browser, select Tools, Delete Browsing History Select all but Inprivate Filtering Data, complete, Go to Internet Options, Content Tab, Clear SSL State, Close browser and reopen and test.
您可以使用GPO在域内使用证书。
但我的问题是Internet Explorer 8,即使证书在受信任的根证书存储中…它仍然不会说它是一个可信的网站。
有了这个和司机的签字,现在需要完成…我开始怀疑谁拥有我的电脑了!
如果你得到一个地址不匹配错误,只允许地址不匹配:
工具,选择“Internet选项” 选择Advanced选项卡 向下滚动屏幕,取消勾选“对证书地址不匹配发出警告”