I want to access localhost via HTTPS by Chrome.

Would you tell me how to solve ?

• localhost is building with tomcat in Spring Boot.

• I finished to

  1. create self-signed certification(*1)
  2. enable HTTPS on Spring Boot(*2)
  3. import the certificattion by Chrome(*3)

• But when I access localhost Chrome display "NET::ERR_CERT_AUTHORITY_INVALID".

my environment:

Ubuntu 18.04
Chrome 79
Spring Boot 2.2.2
Tomcat 9

*1 create self-signed certification:

$ keytool -genkeypair -alias tomcat -storetype PKCS12 -keyalg RSA -keysize 2048 -keystore keystore.p12 -validity 3650 -ext san=dns:localhost -ext san=ip:127.0.0.1

*2 enable HTTPS on Spring Boot

$ vi src/main/resources/application.properties
  server.port=8443↲
  server.ssl.enabled=true↲
  server.ssl.key-store=keystore.p12↲
  server.ssl.key-store-password=password↲
  server.ssl.key-password=password↲
  server.ssl.key-store-type=PKCS12↲
  server.ssl.key-alias=tomcat↲
  security.require-ssl=true↲

*3 import the certificattion

$ keytool -exportcert -keystore keystore.p12 -alias tomcat -file keystore.der

(or when I access localhost, export the certificate from Chrome display)

After do, on Manage certificates import keystore.der.(Chrome setting:GUI)

Thanks Regard.

Solved

Getting Chrome to accept a self-signed localhost certificate

Excerpt from the above link

1. on Terminal

• $ sudo apt-get install libnss3-tools

2. on Chrome

• click the lock icon with an X,
• choose Certificate Information
• go to Details tab
• Click on Export... (save as a file) - the path of that file will be referenced in step 3 below as EXPORTED_FILE_PATH

3. on Terminal

• $ certutil -d sql:$HOME/.pki/nssdb -A -t "P,," -n EXPORTED_FILE_PATH -i EXPORTED_FILE_PATH