This question already has an answer here:
- Self signed certificates for https 3 answers
I'm a bit new with certificates and have been unable to find an answer on this.
We need to place controls around an application that is accessed via URL, we have moved the URL to citrix, but the certificate is not trusted so it shows the "not secure" icon.
I was asked to generate a CSR file so that we can add the certificate to our store, but it's not our web server.
So, my question is:
- Even though our store does not trust the certificate, does it still enable secure communication?
- Is there a way for us to import this certificate to our store to trust it?
CLARIFICATION: I am familiar with generating CSR files and everything else that comes with it. Originally we thought this web server was ours, but it is not. It is owned by the company we send files to. Due to the nature of what gets sent there are security controls, such as ensuring data being sent is encrypted and was not tampered with. It leaves our side goes through a PI server then out to this web server. My question is, because this company self signed their cert and we cannot add it to our trusted domain does a secure connection still get established between browser-server?