Re: Chromium and self-signed certificates

Lawrence D'Oliveiro <ldo@nz.invalid> wrote:

On Sun, 1 Sep 2024 16:12:50 -0000 (UTC), bp wrote:
 

In principle it would make sense to make a root CA for the three domains
(zefox.com, zefox.net and zefox.org) under my control but if I disturb
that one CA up all three become unreliable.

 
If these are names intended to be accessed by the general public, then you
need certs signed by official CAs that are trusted as standard by the
browsers that the general public uses.
 
Setting up your own private CA only works for authentication between
machines that you control.

I understand that's the general intention, but can't browsers be told
to trust a particular self-signed certificate by a user? That's what
I was trying to do in my initial experiment, but apparently didn't
construct the certificate correctly. If there's something else I'm doing
wrong it'd to good to know now. The facility to export and import
certificates to Chromium under Raspian Bookworm seems to suggest so.

Thanks for writing, and again for your patience!

bob prohaska