1

I have an internal HTTPS-only site with an expired SSL/TLS certificate.

Although I could bypass expired certificates from web browsers, there are other client applications that require a valid certificate or can't be disabled manually.

I need to trust these expired certificates from my local machine.

Is it possible from the Windows certificate manager?

FWIW, I am trying to connect the Sonarqube server (with an expired certificate) from Visual studio 2019. From what I have seen, VS2019 doesn't have any settings to disable certificate checks.

1
  • You install the expired unrevoked certificate into the user's and machine's certificate store. However, that doesn't necessarily mean your browser, will be happy about the expired certificate. Visual Studio to my knowledge use's the certificate store.
    – Ramhound
    Commented Oct 16, 2022 at 4:48

1 Answer 1

0

Not possible. Expired means expired, whether the certificate is trusted or not. Only if software has an explicit "make it insecure" function (like browsers do) can you chose to ignore this.

There can only be one solution, which is exceedingly trivial, too: Update the certificate. You can create a new self-signed certificate with any validity in seconds.

2
  • Problem is, I don't have access to this server and the DevOps personal is so lazy. If this is not possible, I would rather swallow and end trying than make a move. Thanks for the answer.
    – wenn32
    Commented Oct 17, 2022 at 17:18
  • @wenn32 Lazy? Sounds like passing it higher up the hierarchy could solve this problem. ;-)
    – Daniel B
    Commented Oct 17, 2022 at 17:40

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .