Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I have a number of network devices that I access over HTTPS. However, they are self-signed certificates, so Chrome displays a warning page.

enter image description here

In earlier versions of chrome, I seem to remember an "add exception" button on this screen, or on the certificate's information window (if you clicked the HTTPS in the address bar). However, that has long since disappeared.

How can I add an exception for specific self-signed certificates in Chrome 28?

share|improve this question

migrated from serverfault.com Aug 14 '13 at 22:08

This question came from our site for professional system and network administrators.

    
Are you trying to get this done on multiple workstations or just yours? –  Tanner Aug 14 '13 at 15:23
    
Just a single workstation. –  Force Flow Aug 14 '13 at 15:26
    
Why didn't you ask this on SU? –  Tanner Aug 14 '13 at 15:28

1 Answer 1

up vote 9 down vote accepted

Export the certificate from Chrome, and then import the certificate into your trusted root certification authority store. Unfortunately Microsoft made this difficult to do.

Go to Start | and run the command certmgr.msc.

Expand the tree to get to Trusted Root Certification Authorities | Certificates. Go to All Tasks, choose Import and import the certificate in question.

To export the certificate from Chrome:

Click on the Certificate icon in the address bar. Click on Certificate Information | Details and then Copy to File.

share|improve this answer
    
Thanks @Forceflow -- that's a shortcut I'll use myself in the future. –  Quinten Aug 14 '13 at 15:24
    
Well, I imported the cert successfully, but when I refreshed the HTTPS page, it still showed the certificate warning. When I looked in the certificate manager, I couldn't find the imported certificate anywhere. –  Force Flow Aug 14 '13 at 15:30
    
You still need to make sure the name matches the website address you are connecting to. You could edit your /etc/hosts file as one solution. –  Quinten Aug 14 '13 at 15:40
    
I am connecting via IP, not a domain or host name. –  Force Flow Aug 14 '13 at 15:41
4  
I should say that the CN needs to match--can be an IP address or a hostname. –  Quinten Aug 14 '13 at 15:43

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.