Page 1 of 1

Need help with certificates, i think

PostPosted: Thu Feb 07, 2013 10:10 am
by sunkillmoon
Hi all!

i've been trying to get subsonic to work on my laptop from work.
when i try to access it on localhost, all is great.
ports are succesfully forwarded, the web adress was succesfully registered, my android phone plays music flawlessly, it's amazing.

But! and like my mom's, it's a very big but, i can't get it to work on my worklaptop.
Unfortunately, there isn't a lot i can do on the thing, everything had been stapled shut.
Something about a "security issue", can you believe it! I can't be trusted? :)

anyway, when i tried to access it on my home pc via my WAN ip, everything works fine when not on SSL.
otherwise it gives me the "The site's security certificate is not trusted!" but i can proceed anyway.
since this is not possible here at work, how do i make this certificate trusted on my worklaptop?

as you can probably notice, my knowledge on SSL certificates is very limited.

can somebody help?
thank you in advance!

Re: Need help with certificates, i think

PostPosted: Thu Feb 07, 2013 2:20 pm
by bushman4
You won't be able to get it to work out of the box... the self signed certificate that subsonic uses is named "subsonic.org" but you access the site via your WAN IP address. The two will never match, so even if you install the certificate on your work machine, it will always have a mismatched name and be considered "insecure."

Unless you are using Tomcat... then you can generate your own self signed certificate with the proper name. But then you will have to re-do it every time your WAN address changes.

HTH,

Glenn

Re: Need help with certificates, i think

PostPosted: Thu Feb 07, 2013 3:50 pm
by sunkillmoon
Thank you for replying.

I will check out Tomcat and report back if succesful

thanks!

Hans

Re: Need help with certificates, i think

PostPosted: Thu Feb 07, 2013 9:26 pm
by Globe199
bushman4 wrote:You won't be able to get it to work out of the box... the self signed certificate that subsonic uses is named "subsonic.org" but you access the site via your WAN IP address. The two will never match, so even if you install the certificate on your work machine, it will always have a mismatched name and be considered "insecure."

Unless you are using Tomcat... then you can generate your own self signed certificate with the proper name. But then you will have to re-do it every time your WAN address changes.


Can you explain this procedure a bit more? Do you absolutely need to use Tomcat to generate a cert?