For development environment, I can create create self-signed certificate in IIS7.5. But that certificate is SHA-1 and recently browsers are complaining about it. When I open FireBug I see following warnings:
"This site makes use of a SHA-1 Certificate; it's recommended you use certificates with signature algorithms that use hash functions stronger than SHA-1."
So my questions are:
1) Is there a way to create self-signed certificate that is stronger than SHA-1?
2) If not, is there a way to tell browser to stop showing these warnings?
I ended up using @vcsjones answer, but that got me only so far. There we couple of issues I had to resolve before making it work.
1) For some reason I could not import certificate with password. So I ended up creating one it without.
2) When I imported .pfx certificate via IIS, I kept getting "A specified logon session does not exist" when I tried to apply new certificate in Edit Bindings. So I did little research and found this SO answer to be useful, specifically Mike L's answer.
Another thing I would add is that when you are importing certificate, please remember to select .pfx certificate. Import wizard default selection is *.cer which you can import (mistake I made), but then I was not able to see certificate in IIS Server Certificates. When I looked closer it was missing little key in the icon. Now, I did research on that I was able to repair it via KB-889651 article. So make sure you import .pfx and it will work without repairing.
Another note, if you are having trust issues with this certificate import it into "Trusted Root Certificate Authority" as well.