On this page there are instructions on how to create self-signed cert (on apache) and how to install this certificate on server.

I found this page (http://www.visualwin.com/SelfSSL/) with instructions on how to create self-signed certificate on windows (iis). I followed instructions and when I type https://myip/myapp (this leads to localhost because I set my router's port forwarding to go to localhost on my pc) this part works.

From the first link, the most important part is this:

What needs to be installed in IE is actually the Root CA Certificate. In the how-to above, the Root CA Certificate is called ca.crt. Copy this file to the server that is running QuickBooks. The following is for IE6:
- Open IE
- Tools
- Internet Options
- Content
- Certificates
- Trusted Root Certification Authorities Tab
- Import, Next, Browse to 'ca.crt'
- Next, Next, Finish, Close, OK

The part that is missing in second link is that there is no instruction on how to get .crt file, so I tried to get it myself. What I did was following: I opened https://myip/myapp in Firefox and then "This Connection is Untrusted" screen appeared. Then I clicked on "Add Exception" and then below "Certificate Status" I clicked "View". Under the Details tab I clicked on Export and choosed Save as type: "X 509 Certificate (PEM)" and file was saved with .crt extension.

Then I opened IE8 and followed above instructions. After opening https://myip/myapp in IE8 I always get warning screen.

Does anyone knows what am I doing wrong?

Thanks, Ile