I am currently implemented SSL for my Web App in tomcat using a self signed certificate using java Keystore tool.

I am using the web app in my machine as localhost. When I visit the url


The padlock symbol does not appear in the address bar but the page loads successfully.

Why this happening ?

Does openSSl resolve this issue ?

closed as off-topic by MDMarra, Greg Askew, Ward, mdpc, Tom O'Connor Aug 12 '13 at 12:55

This question appears to be off-topic. The users who voted to close gave this specific reason:

  • "Questions must be relevant to professional system administration. Server Fault is a site dedicated to professionals; novice questions are off-topic. Please see the Help Center for more information on topicality. The best advice we can give you is to hire a professional to help you out." – Ward, mdpc, Tom O'Connor
If this question can be reworded to fit the rules in the help center, please edit the question.

  • 1
    Which browsers have you tried? What's your OS? – Peter Hahndorf Aug 11 '13 at 8:33
  • @PeterHahndorf Windows in Mozilla Firefox – user2625739 Aug 11 '13 at 11:12

In order for the browser to declare the site as secure it would need to trust the certificate and it won't trust a self signed certificate. Create a CA and import it into the your tomcats trust store . use the CA to sign a new certificate which you can import into tomcats key store, then import the CA into your browser trust store. The browser should now trust the certificate. Some browsers/ servers may insist on a verification depth of more than 1 in which case you will need to also create an intermediate CA such that the first CA signs the Intermediate CA signs the certificate.

Not the answer you're looking for? Browse other questions tagged or ask your own question.