Sahi: allowing certificates

Use This Command:

keytool -genkey -alias sahi.example.com -keypass sahipassword
-storepass sahipassword -keyalg RSA -keystore
"D:\sahitest\sahi\certs\sahi_example_com" -dname
"CN=sahi.example.com, OU=Sahi, O=Sahi, L=Bangalore, S=Karnataka, C=IN"

For more detail Refer this: sahi.co.in/w/httpsssl-sites-do-not-work-properly

Also you can add certificate in browser. Search around the forums you will get similar post and resolution for it.
Try with disabling the option like check for certificates and signatures of your IE advance setting tab.

hi Narayan,
we are looking for an automated solution to avoid manual installation of certificates in IE.
We have a lot of different sites with a lot^2 expiration dates.
I'm thinking about a nightly job that erases all generated certificates, with sahi offline, and an automatic re-generation of certificates the first time site is accessed. Of course the problem is avoid IE manuality.
We are looking in Microsoft tech and friends sites ...
Any suggestion ??

Tia
Massimo

hi all
we solved ( windows only .... eh eh )  ;-)
First above all I forgot to inform you we are working on a WIN 2003 Server and OpenSSL is not intalled on this machine.
Solution , we generate the key in the keystore first , after we export the key inside a .cer file, third we use the certutil.exe tool to import the key directly inside IE.

Here our files :

************** ssl.txt *****************************
c:\sahi\bin\crea_certificato.bat $keytool $domain $password $keystore
****************************************************

************ c:\sahi\bin\crea_certificato.bat ( batch file called from ssl.txt ) **********
set keytool=%1
set domain=%2
set password=%3
set keystore=%4
cd \sahi\certs\

%keytool% -genkey -alias %domain% -keypass %password% -storepass %password% -keyalg RSA -keystore %keystore% -validity 2000 -dname "CN=%domain%, OU=Sahi, O=Sahi, L=Bangalore, S=Karnataka, C=IN"

%keytool% -export -alias %domain% -keypass %password% -storepass %password% -keystore %keystore% -file %keystore%.cer

certutil -addstore ROOT %keystore%.cer
*********************************************************************

So we can now schedule every midnight a certificates clean-up inside the c:\sahi\certs directory in order to automatically accept new site certificates ( new site checked or new certificate due expiration )

cheers
Massimo

Automating a automation tool. Gr8 work massimo.