This will allow SSL to be used, but the web browser will throw up warning message stating “This connection is untrusted.”
Using Firefox as an example:
click on “I understand the risks”
click on the “Add Exception “ button
when the “Add Security Exception “ from pops up,
click on the “view” button
Notice on the “General Tab” the Issued To and the Issued By are the same.
This is a self signed certificate.
Close the “Add Security “ form and check the “Permanently store this exception”
Check box. Then click on the “Confirm Security Exception” button to store the
self signed certificate into the FireFox security store.
Be aware the SDA will only generate a self signed certificate that is good for one year. One year after the certificate is created, web browsers will throw up an error (even if the self signed certificate had been added to the browser security store ). Click on the “Technical Details” and it will tell you the certificate has expired. Should this error happen, you will need to add the security exception on a temporary basis and have the SDA generate a new Self Signed Certificate.
To enable SSL with a Self Signed Certificate:
Click on Settings | Security Settings
Click “Enable SSL”
Click “Get New SSL Certificate”On the Request an SSL Certificate form, fill out
Country, State, Locality, Organization, Organization Unit, Domain Name, and Email
all fields are required. There are examples for each to the right of the form.
Click “Generate Certificate Request”
Scroll to the bottom of the page.
Click on the link “Can I use a self-signed certificate instead?”
(to the right of the “Download Certificate Request” button
This will cause a “Using a self-signed certificate” warning pop-up to appear
click “Save and Restart Apache “
The browser will clear and post a “Redirecting please wait” message.
After 2 – 5 minutes the browser will reload the Security Settings page.
Under “Optional SSL Settings”
Look at “Enabled ports 80,443 and click the “change” link.
Check the “Enable port 443 “ box and the “Forward port 80 to port 443” box
Click “Apply Changes”
The browser will clear and post a “Redirecting please wait” message.
After 2 – 5 minutes the browser will reload and give a warning about using
a self signed certificate. (See above)
Add the exception to the browser security store.
SSL is now enabled on the SDA.
How to replace an expired self signed certificate with a new one:
Click on Settings | Security Settings
Scroll down the page to “Optional SSL Settings”
Look at “Valid SSL certificate on file” and click the change link next to it
This brings up a page that says “Certificate Type”
Ensure the “Private key and Certificate” radio button is active
Click on “get a new SSL certificate “ link (underneath and to the right of the
radio buttons)
The Request an SSL Certificate form should already be filled out if the certificate
is being replaced. Make any changes needed.
Click “Generate Certificate Request”
Scroll to the bottom of the page.
Click on the link “Can I use a self-signed certificate instead?”
(to the right of the “Download Certificate Request” button
This will cause a “Using a self-signed certificate” warning pop-up to appear
click “Save and Restart Apache “
The browser will clear and post a “Redirecting please wait” message.
After 2 – 5 minutes the browser will reload the Security Settings page.
You will need to add the new certificate to the browsers security store.
© 2024 Quest Software Inc. ALL RIGHTS RESERVED. Nutzungsbedingungen Datenschutz Cookie Preference Center