up vote 2 down vote favorite
share [g+] share [fb]

I'm trying to get a valid secured environment for HTTP communication to behave like normal ones. I'm doing this for a restricted group of users.
There is a hardware server running a web service (nginx). OpenSSL is installed on this machine and I'm using it as a CA as well. I have created the root CA certificate and I have signed a certificate for the web service using it. Then I have provided the root CA certificate to a trusted user (another PC controlled by me) and it was imported to Firefox as a trusted authority.
Almost everything works fine (the HTTPS service is accessible and the warning page doesn't appear), but I get a blue status (the first thing in the address bar, before https://... ) of the service stating: 

Youy are connected to
example.com
which is run by
(unknown)
Verified by: MyCA Company

Other world-wide known HTTPS sites like addons.mozilla.com, for example, show a green status and they don't have this (unknown) piece of data. They have there the company name and location.

Is it possible to get a custom private secured environemt behave like a normal one and be green? If yes, what should be done in order to get this (client-side? server-side?) ?

As a side-effect question: where could I learn about PKI, SSL, an all this stuff from 0 to advanced? or maybe there are some good books related to this?

Thank you in advance for any help and answers.

link|improve this question
1  
My guess is this is missing, or the browser is not set up to trust the CA. – Daniel Beck Jan 28 at 17:47
@Daniel Beck: Yes, I think this is the correct direction of research for this question. The browser has the root CA certificate imported and it doesn't show a warning page when accessing the site, so it should be OK. Thank you for your note, it is useful. Still waiting for a more practical solution using openssl tools (if it exists). – ArtM Jan 28 at 18:04
Related. – Daniel Beck Jan 28 at 18:11
@Daniel Beck: Thanks. Basically this related thread on serverfault.com answered the question, only some datails remained: is it possible to get a custom company name and country like "Mozilla Corporation (US)" for a blue (not EV) certified site? or the color and this data is strictly related? (not asking especially you, maybe someone else will read this and could answer too) – ArtM Jan 28 at 19:13
I don't think so‌​. But I have no experience with SSL certificates — just wait a bit for a more qualified answer. – Daniel Beck Jan 28 at 19:18
show 1 more comment
feedback

Know someone who can answer? Share a link to this question via email, Google+, Twitter, or Facebook.

Your Answer

 
or
required, but never shown
discard

Browse other questions tagged or ask your own question.