I have a web application that utilizes SSL. The website is not publicly facing, and is for private internal access only at our enterprise.
For security reasons, we run two separate Active Directory domains and networks, but this particular web app is accessible by users from both domains. We maintain private CA's on each domain, to generate certificates for web servers.
The web app in question has a valid certificate issued by one of the CA's, and all the users on that domain "trust" the website. Users on the other domain can access the website, but are shown a certificate warning.
Since I don't want to train my users to ignore warnings, I'd like to create some sort of trust relationship between the CA's, but I don't know how to do so.
So to reiterate...
DOMAIN1 and DOMAIN2 each have their own certificate authorities. WEBAPP is a member of DOMAIN1, and has a signed SSL cert from the DOMAIN1 cert authority, so all DOMAIN1 users trust the certificate. All users from DOMAIN2 receive certificate errors.