ssl - 如何创建受信任的自签名 SSL 证书

Question

我在 IIS7.5 中创建了一个自签名证书，但出现以下错误

    There is a problem with this website's security certificate. 


 The security certificate presented by this website was issued for a different website's address.

Security certificate problems may indicate an attempt to fool you or intercept any data you send to the server.  
  We recommend that you close this webpage and do not continue to this website.  
  Click here to close this webpage.  
  Continue to this website (not recommended).  
     More information 


If you arrived at this page by clicking a link, check the website address in the address bar to be sure that it is the address you were expecting. 
When going to a website with an address such as https://example.com, try adding the 'www' to the address, https://www.example.com. 
If you choose to ignore this error and continue, do not enter private information into the website. 

For more information, see "Certificate Errors" in Internet Explorer Help.

如何解决这个错误？

Answer 1

这不是错误，而是警告，浏览器不信任您生成的证书。

要在您控制的机器上禁止此操作，您可以将证书添加到受信任的根 CA 存储区 (Example)。

如果此机器在 Internet 上/由您无法控制的机器访问，则您无法更改此行为，除非您从受信任的颁发 CA 购买证书。