Hi, Folks -

Agent portions of RMN have recently been made 'https' instead of 'http', using an SSL Certificate that is self-signed as opposed to one we'd have to pay someone else to sign.

All Internet browsers, quite rightly, issue a warning when they encounter such a Certificate. Not all of the browsers, however, make it easy to accept such a Cert on a permanent basis.

Firefox sensibly includes an easy way to do that - just click on "I know the risks" when the warning comes up, and follow your nose. :) You'll have it done in just a few clicks.

Chrome, however, makes it weirdly difficult to accomplish. Conversations that can be found on the Web indicate users have been asking Google since at least 2009 to include that feature in Chrome, but Google doesn't seem inclined to do it.

I did find instructions, though, for a way to do it. These steps are said to work for Chrome on Windows:

You can avoid the message for trusted sites by installing the certificate.

This can be done by clicking on the warning icon in the address bar, then click

Certificate Information -> Details Tab -> Export...

Save the certificate.

Use Chrome's Preferences -> Under The Hood -> Manage Certificates -> Import.

On the "Certificate Store" screen of the import, choose "Place all certificates in the following store" and browse for "Trusted Root Certification Authorities." Restart Chrome.

Linux users have to go at it a bit differently, using command line tool 'certutil'. On Debian, certutil is found in package libnss3-tools:

First click on the certificate warning and export the certificate to your file system. (Connection > Certificate Information > Details > Export)

Then use certutil in order to add this saved certificate as a trusted peer:

certutil -d sql:$HOME/.pki/nssdb -A -t P -n -i

That certutil command should be issued all on one line.

All the above info was found here:

http://superuser.com/questions/104146/add-permanent-ssl-certificate-exception-in-chrome-linux

Additional info for Linux users, if you're interested:

https://code.google.com/p/chromium/wiki/LinuxCertManagement

--hobie

***************************************************************************