This section describes how to import root certificate authority into the browser to use Che with self signed TLS.

Google Chrome

  1. Go to chrome://settings/certificates, Authorities tab, click import and find your generated rootCA.crt (or ca.crt for OpenShift 4) file.

    che tls chrome import 1

  2. Select Trust this certificate for identifying websites and click OK.

    che tls chrome import 2

  3. Browser is satisfied with Che certificate and is reporting secure connection.

    che tls chrome import 3

Firefox

  1. Go to about:preferences and search for certificates and click View Certificates

    che tls firefox import 1

  2. Go to Authorities tab, click Import and find your generated rootCA.crt (or ca.crt for OpenShift 4) file.

    che tls firefox import 2

  3. Select Trust this CA to identify websites and click OK.

    che tls firefox import 3

  4. Browser is satisfied with Che certificate and is reporting secure connection.

    che tls firefox import 4

OSX

  1. Open Keychain Access.

  2. Make sure you’re on System keychain and drop your rootCA.crt (or ca.crt for OpenShift 4) file there.

  3. Double-click your imported CA, go to Trust and select When using this certificate: Always Trust.

  4. If browser still report invalid certificate, try to restart it.