This answer does not directly answer βWhy does it not trust all certificates to work with IE?β, However, it offers an answer to a question that probably caused the question asked here. that is, for those who run Selenium as a Windows service and find that they do not trust their self-signed certificates.
Problem
IE does not trust the root directory and issues self-signed authority certificates and therefore presents a page asking the user to decide if he wants to continue and trust the site. This prevents the progression of any selenium tests.
Decision
The solution is relatively simple and logical in concept, root and issuing certificates must be installed on the computer as trusted certificates.
However, the difficulty lies in the fact that the Windows Service running Selenium RC trusts certificates if the service runs under a system account. To fix this, follow these steps.
- Install the root certificate as a public trusted certificate authority.
- Install an issuance certificate as an intermediate certification authority for the entire organization.
Adding certificates to the trusted root certificate authority store for the local computer
Administrators are the minimum group membership required to complete this procedure.
To add certificates to the trusted root certificate authority store for the local computer
- Click Start, select Start Search, type mmc and press Enter.
- From the File menu, select Add / Remove Snap-In.
- Under Available snap-ins, select Certificates, and then click Add.
- In this snap-in, certificates will always be processed, click on the computer account and click "Next".
- Click "Local Computer" and click "Finish."
- If you no longer have snap-ins to add to the console, click OK.
- In the console tree, double-click Certificates.
- Right-click the Trusted Root Certification Authorities repository.
- Click Import to import the certificates and follow the instructions in the Import Certificate Wizard.
Adding certificates to the intermediate certificate store for the local computer
- In the console tree, double-click Certificates.
- Right-click the intermediate certificate store.
- Click Import to import the certificates and follow the instructions in the Import Certificate Wizard.
source share