8

I have the following need:

A windows service needs to connect to a svn repository through https. The service needs also to run as local system account for IO permissions on the machine.

Now when the service tries to connect to SVN, it throws an error saying that the certificate is not trusted (it's a self signed certificate).

I have no access to the service source code to add the svn option to trust certificate and accept it permanently. So I need to know how, in windows, add that SSL certificate to the local system account trusted certificates.

Is that possible, and if it is, what are the steps to do that?

Thanks.

Improve this question
2
  • Do you have access to the .crt file?
    – Dennis
    Commented Dec 21, 2011 at 13:20
  • I have it trusted on my user account, so I can export it from certmgr.msc
    – Matteo Mosca
    Commented Dec 21, 2011 at 13:37

2 Answers 2

Reset to default
8

Follow these steps to trust a certificate system-wide:

  1. Double-click the .crt file.

  2. Click Install certificate..., then Next >.

  3. Choose Place all certificates in the following store and click Browse...

  4. Choose Trusted Root Certification Authorities and click OK.

  5. Click Next >, then Finish.

This has however the drawback that Windows will trust any certificate signed by the same CA.

Improve this answer
1
  • not work for windows server 2008 sp2, not sure whether restart os required
    – Scott混合理论
    Commented May 12, 2014 at 9:15
5

sorry @Dennis, but that's not the best turn, because your solution only installs the certificate for the local user, not for the complete system! It's valid and good to install personal certificates, but not root certificates!

better

  1. start mmc.exe as Admin mmc dialog
  2. File > Add Snap-In (Ctrl-M)

  3. add "Certificate" add snapins dialog a). if you are not prompted and the snapin is added instantly, go back to 1)

    b) select "Computeraccount" from popup, then proceed and select "local computer"

    c) you should see "Certificate (local computer)" Snapin on the right add snapin store selection d) confirm (OK)

  4. Then right click the correct section, subsection "Certificates", where desired certificate should be installed to.

  5. Select "All Tasks" > "Import" from context menu
  6. then it's same up from your description point 3, normally the correct store should already be preselected because you right-clicked on it

This will fix the untrusted cert message for ALL (future) computer users and for services not running with your credentials!

Improve this answer
6
  • Then right click the correct section. Which is that, if you try to trust a simple (not root CA) certificate on the machine?
    – user2173353
    Commented Jun 28, 2016 at 9:12
  • 1
    @user2173353 you might install them in "my certificates"
    – childno͡.de
    Commented Jun 29, 2016 at 7:50
  • What if I install the certificate as described in "my certificates", but SVN (TortoiseSVN) still ask me whether to trust the certificate?
    – royalTS
    Commented Dec 12, 2017 at 12:18
  • @royalTS then you didn't read the manual svnbook.red-bean.com/nightly/en/…
    – childno͡.de
    Commented Dec 12, 2017 at 12:32
  • 1
    @childno͡.de not sure, where you would like to point me...
    – royalTS
    Commented Dec 12, 2017 at 12:37

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .