Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a server with some web applications, and I'd like to enable HTTPS to minimize the chance of someone picking up my authentication information.

However, I don't really want to shell out for certificates since I add new sites to this regularly as part of consulting and private projects, so instead I'd just like to create a certificate and convert the site into using HTTPS.

However, this gives me warnings in the browser about untrusted certificates.

How do I go about making my own computers trust these certificates?

share|improve this question
up vote 1 down vote accepted

Certificates are organised in a chain of certificates.

First you have a root certificate (public key) (Let's say Verisign etc... who keeps the private key). Then they issue certificates that by signing private/public keys of other people and putting them into certificates.

So for you to trust your own certificates, you have to do the same: create a root certificate and private key, then signing sub-certificates for your site.

Then you add the (public) root certificate to your browser so that he can verify the sub-certificates against the public key of your CA, et voila!

If you create a new site, just issue a new cert for it, and sign it as well.

share|improve this answer

Think you might want "Installing and Removing Trusted Certificates" from

share|improve this answer

Would be good to know the OS and software of your server as well as client to give more specific answers to doing this, but generally speaking, importing your own CA's public key will allow you to trust all the keys signed by that CA.

Alternately, you can also get free, valid SSL certificates through

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .