My work place intercepts SSL connections, looks at their contents, and then passes the data to and from my machine and remote hosts - a kind of man-in-the-middle attack. This is not uncommon in corporate or enterprise environments. Now I have a virtual machine running on my computer. The virtual machine does not have the certificates the actual machine has which enable the MITM to work transparently. As a result, I get this message: What can I do to resolve this?
asked Jun 2, 2016 at 19:36 3,471 2 2 gold badges 22 22 silver badges 25 25 bronze badges Install the fake certificates on the virtual machine. Commented Jun 2, 2016 at 21:04@Ƭᴇcʜιᴇ007: Corporate ID didn't want to touch the issue. Don't let the word "corporate" throw you, this is a perfectly legitimate question about certificate authorities.
Commented Jun 2, 2016 at 21:33 @Ramhound: The difficult I had was in finding said certificates. Commented Jun 2, 2016 at 21:34 In 2020 you can just go to chrome://flags and select "Insecure origins treated as secure" option Commented Dec 21, 2020 at 12:43First thing's first:
DO NOT DO THE FOLLOWING IF YOU DO NOT TRUST THE CERTIFICATE ISSUER
Doing this allows a man-in-the-middle to see all of your communications. This fix should only be employed if you are in a situation which warrants it, not if you're sitting at a coffee shop and having problems connecting to things.
The first step is to acquire the certificate of the MITM.
To do so, click the little HTTPS lock and hit details:
Click "View Certificate" in the dialog that comes up.
Certificate details pane" />
Hit "Details" in the Certificate viewer and select the top certificate, which should be from an address other than the one you were trying to get to (see picture):
Then hit "Export" and save the certificate file.
Now, go to Settings → Advanced → Manage Certificates. → Authorities
And hit "Import". Select the certificate file you saved previously and hit all of the check boxes that appear, authorizing it to certify everything.
