Skip to content

Installing the Root Certificate

Alexander Tauenis edited this page Sep 27, 2024 · 1 revision

In order to make HTTPS connections working via WebOne proxy, it's need to install the proxy server's Root Certificate Authority. Otherwise you'll get SSL connection failure or warning messages (depending on used client software). With root certificate been installed, connections should perform successfully. Also you can bypass the certificate check by opening all web sites by http:// protocol, and WebOne will enable access via plain HTTP.

See also: HTTPS and SSL.

Where it is located

The Root Certificate can be downloaded from proxy server's status page:

CA-IE6

Microsoft Internet Explorer

Just download it to disk, open, and click Install Certificate. Sometimes it's need to set up it as Trusted Root Certificate Authority if automatic kind detection fails.

Root Certificate

Many MS Windows applications, such as mIRC, Miranda, MSN/Windows Messenger, will also use this certificate for secure connections through proxy.

Microsoft Internet Explorer for Macintosh

Just click the link, and follow Certificate Authority accepting wizard instructions.

Unlike Windows Internet Explorer, IE:Mac does not installing certificate to system database, so other applications will not use it.

Netscape Navigator 4.x

Just click the link, and Navigator will start Certificate Authority accepting wizard. Follow its instructions.

Mozilla Firefox

Download the certificate, then go Tools -> Options -> Advanced -> Encryption, click View Certificates, go to Authorities tab and click Import button. Then choose the downloaded file, and click Open. Firefox will ask about how you trust the certificate. Choose first checkmark.

CA-Fx2

Mozilla Suite, Netscape 6.x, 7.x

The instructions are in the middle between Netscape 4 and Firefox. Some Mozilla versions are displaying import dialog window after click on CA download link, some are needing to import it manually from downloaded file via Edit -> Preferences -> Privacy & Security -> Certificates -> Manage Certificates -> Authorities -> Import.

Opera

Download the file to disk. Go to Tools -> Preferences -> Advanced -> Security, click Manage Certificates, go to Authorities, and click Import. Then choose the downloaded file, and click View button. The certificate will be displayed. Check the "Allow connections to sites using the certificate" mark (if it is not previously checked), and uncheck the "Warn me before using this certificate" mark.

Some versions of Opera are displaying the described dialogue window after click on the CA file link. So it's enough to import the certificate via that window.

CA-O9

Apple Safari, Google Chrome (Windows)

The steps are identical to Microsoft Internet Explorer as they are using Windows certificate database.

Apple Safari, Google Chrome (MacOS X)

Download the file to your hard disk. Then open Keychain Access utility application. Look at keychains list, it should contain X509Anchors keychain. If not, add it to list: Select Add Keychain... from the File menu. In the resulting dialog box, select the X509Anchors keychain found at /System/Library/Keychains/X509Anchors and click Open. If the keychain is grayed out, it has already been added to the list of keychains in Keychain Access.

Note: the keychain list is hidden by default. Click one of these buttons to show it: Show Keychains Tiger Show Keychains Panther.

Then import it to X509Anchors keychain.

CA-OSX

Many MacOS X applications, such as Microsoft Messenger, will also use this certificate for secure connections through proxy.

Google Android

Just open download link and follow instructions displayed by Android OS. The certificate will be used by all Android applications to establish secure connections through proxy.


What if I see an error message not related to certificate?

If you can't get access to HTTPS web sites via WebOne even after successful import of CA certificate, and you're seeing attempts to open the site through the proxy in WebOne log (otherwise you have mistakes in client configuration - it tries to connect directly to Internet), see this article about known problems and their troubleshooting.

Clone this wiki locally