如何在IE中处理和接受SelfSigned SSL证书?
我有一个具有自签名证书的虚拟机。如果我在 Firefox 或 Chrome 中测试我的 https 页面,我只需要接受或添加证书的例外就可以了。我可以进行 JSON 调用或 JSONP 调用。
但是,当我在 IE 中执行此操作时,我不能。我将证书添加为 ROOT 证书,然后
1)每次重新启动浏览器时,它都会再次要求提供证书。
2) 每次我使用 https 进行 JSONP 调用时,IE 不喜欢它并显示“IE 已阻止该网站显示安全证书错误的内容...”。即使我点击“显示阻止的内容”,它也没有帮助并显示任何内容。 :(
知道如何处理 IE (没有获得真正的证书)谢谢。
I've a VM that has a self-sign certificate. If I test my https page in Firefox or Chrome, I just need to accept or add exception for the cert and I will be fine. I can make JSON call or JSONP call.
However, when I do it in IE, I can't. I add the certificate as ROOT cert, and then
1) every time I restart the browser, it will ask for the certificate again.
2) every time I make JSONP call with https, IE doesn't like it and show "IE has blocked this website from displaying content with security certificate error...". and even I click "display blocked content", it doesn't help and show up anything. :(
any idea how to deal with IE (without getting a real cert) Thanks.
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(2)
当 Internet Explorer 屏幕上显示警告“此网站的安全证书有问题”时,请按照以下步骤为此网站创建安全例外:
从现在开始(直到自签名证书过期),您每次访问该页面时都不会收到证书警告。
如果这不起作用,您可能已将证书安装在错误的位置。要删除不正确安装的证书,请打开“Internet 选项”,单击“内容”选项卡,单击“证书”按钮,在选项卡列表之一中找到您的证书,然后单击“删除”按钮。然后再次尝试按照前面的说明进行操作。
如果此后仍然失败,则您的证书很可能无效。右键单击该网页,选择“属性”,单击“证书”,然后仔细检查“颁发给:”名称是否与 URL 栏中的域匹配,并且“有效期从...到..” .”日期包括客户端计算机设置的日期。
如果安装证书灰显,您必须以管理员身份运行 iexplore。
When Internet Explorer presents the screen with the warning "There is a problem with this website's security certificate", follow these steps to create a security exception for this site:
From now on (until the self-signed certificate expires), you will not get the certificate warning every time you go to that page.
If this doesn't work, you may have already installed the certificate in the wrong location. To remove an incorrectly installed certificate, open Internet Options, click on the "Content" tab, click the "Certificates" button, find your certificate in one of the tabbed lists, and click the "Remove" button. Then try following the preceding directions again.
If it keeps failing after that, there is a high probability that your certificate is invalid. Right-click the web page, select "Properties", click on "Certificates", and double-check that the "Issued to:" name matches the domain in the URL bar, and that the "Valid from ... to ... " dates include the date that the client machine is set to.
If the Install Certificate is greyed out, you have to run iexplore as administrator.
您是否将其放入用户受信任的根证书存储区或计算机中?您是否以同一用户身份运行?将自签名证书放入受信任的根存储应该可以正常工作。
或者,查看线路流量并查看是否将正确的证书发送到客户端,这可能是服务器配置问题。
Did you put it in the user Trusted Roots certificate store or the machine? Are you running as the same user? Putting a self signed certificate in the Trusted Roots store should work fine.
Alternatively, look at the wire traffic and see if the proper certificate is being sent to the client, it might be a server config problem.