SSL Decryption with trustwave certification(subordinate certification)

[willstech]

I have a question related with a SSL certificate for a SSL decryption.

I'd like to do a SSL decryption, but it is possible with a self-singed or subordinate certification.

(It is only possible to issue for subordinate certification from Microsoft CA Server. )

But the article that is linked below say that Trustwave can issue a subordinate certification.

Article: http://www.h-online.com/security/news/item/Trustwave-issued-a-man-in-the-middle-certificate-1429982....

If I buy a subordinate certification from Trustwave, is it possible to apply SSL decryption without any security warning message on the web browser?

Please teach me, someone who know or experience about it.

Thanks,

Eugene.

[tasonibare]

Hello Eugene,

Yes, you can perform SSL decryption without getting any security warnings on your web browsers.

These security warnings only occur in web browsers that do not already trust the Root CA that signed the subordinate certificate that's doing the decryption.

Adding the Trustwave Root CA certificate to your workstations' certificate root stores, if it's not already there, would ensure that you do not get the security warnings when SSL decryption is implemented.

Here are a few links that have details on importing root certificates into Chrome, IE, Firefox and pushing it into the root store of a whole domain, using AD Group Policy Objects:

SSL Decryption Certificates

Installing root certificate in Mozilla Firefox - WebMoney Wiki

Installing root certificate in Google Chrome - WebMoney Wiki

Regards,

tasonibare