5.) problems with SSL /https/ and invalid (or self-signed) certificates
- Why the client cannot connect to server with invalid/self-signed certificates?
If a user opens a web page and the browser detects invalid/self-signed certificate it warns user about this problem, and usually shows an option to accept the server certificate (or add a security exception) manually. If the request is sent by JavaScript there is NO such option to show user the security warning, and also it is NOT possible to add security exception directly by JavaScript!
- What to do to solve this problem?
a.) use valid server certificate from commercial CA or
b.) if your server certificate is not self-signed and is issued by your own CA, add your CA certificate into "Trusted Root Certificates" in your browser/system or
c.) open the principal URL directly by browser, accept the invalid certificate (or add a security exception) manually