导入CA的证书作为受信任的证书。
导入外部CA的证书作为受信任的证书。
Import the external ca's certificate as a trusted certificate.
无法将这个证书验证到一个受信任的证书颁发机构。
This certificate cannot be verified up to a trusted certification authority.
例如，失败的信任验证可能只是意味着没有可信任的证书。
For example, a failed trust verification could simply mean that the trust certificate is not available.
要么是不受信任的证书签名的，或无法找到它的一个组件。
Either it is not signed with a trusted certificate, or one of its components cannot be found.
CA的证书现在已经作为受信任的证书导入到Web浏览器。
The ca's certificate has now been imported into the Web browser as a trusted certificate.
所有keystore项(密钥和信任的证书项)都是用唯一别名访问的。
All keystore entries (key and trusted certificate entries) are accessed with unique aliases.
因此，您必须在您信任的证书存储区中具有服务器的SSL证书。
So, you must have server's SSL certificate inside your trusted store of certificates.
如果该证书已过期或无法重新使用，请使用在企业级别受信任的证书。
If the certificate has expired or cannot be reused, use a certificate that is trusted at the enterprise level.
浏览器将打开一个对话框，可让您将CA的证书添加为受信任的证书颁发机构(图14)。
The browser will open a dialog that enables you to add the ca's certificate as a trusted Certification Authority (Figure 14).
信任存储库——受信任的证书条目：这种类型的条目包含单个属于另一方的PKC。
Truststores — trusted certificate entry: This type of entry contains a single PKC belonging to another party.
如果证书未经可信任的证书颁发机构签名，并且您信任此机构，您可以增加证书签名。
If the certificate was not signed by a trusted certification authority, you can add the certification authority if you trust the authority.
要么不与受信任的证书，或它的组件之一签署无法找到。您可能需要重新安装或恢复此文件。
Either it is not signed with a trusted certificate, or one of its components cannot be found. you might need to reinstall or restore this file.
注意，第一次连接时，您的浏览器可能会提醒您使用了一个未被信任的证书，因为您生成了自己的证书。
Note that the first time you connect, your browser is likely to complain about an untrusted certificate, because you generated your certificate yourself.
请注意，在前面涉及客户端身份验证的场景中，客户端提供一个证书，然后服务器针对受信任的证书集对其进行检验。
Notice that in the previous scenario involving client authentication, the client presents a certificate that is validated by the server against the set of trusted certificates.
在导入外部ca颁发的证书之前，需要先导入外部ca颁发的证书，您需要将外部ca本身的证书作为受信任的证书导入ca - keystore。
Before importing the certificate issued by the external ca, you need to import the external ca's own certificate into ca-keystore as a trusted certificate.
要想增加一个可信任的证书颁发机构，浏览到证书错误页面，并且点击InternetExplorer地址栏中的CertificateError按钮。
To add a Trusted certification authority, continue navigation from the Certificate Error page, and then click the Certificate Error button in the Internet Explorer address bar.
在V 7中，默认的计算单元信任存储库包含一个WebSphereDataPower签名证书，这意味着所有DataPower计算机都可以颁发应用服务器所信任的证书。
In V7, the default cell trust store contains a WebSphere DataPower signing certificate, meaning that all DataPower machines can issue certificates that the application servers will trust.
如果访问完全基于自签名证书，则从信任存储区中删除证书的公钥将撤销其访问权。
If access is based entirely on self-signed certificates, deleting the public key of a certificate from the trust store revokes its access.
只有使用受信任的签署方发放的证书才能发起此攻击。
You can only use certificates issued by trusted signers to execute this attack.
当将JSSE用于SSL通信时，需要在本地存储中维护一套信任的签名者的证书，由此得名信任库。
When using JSSE for SSL communication, one needs to maintain the set of trusted signer certificates in a local store, hence the name truststore.
存在许多对远程用户进行身份验证的协议，例如来自受信任来源的证书或安全令牌。
There are many protocols for authenticating remote users, such as certificates or security tokens from trusted sources.
很可能需要将用于LDAP服务器证书的签名密钥(证书)放在信任存储库中。
You'll most likely need to place the signing key for the LDAP server's certificate into the trust store.
如果为您的WebSphereApplicationServer启动了安全性，您必须额外指定安全用户和信任存储信息的证书。
If security is enabled for your WebSphere Application Server, you must additionally specify credentials for the security user and trust store information.
WebServer插件配置将自动生成plugin-key.kdb，其中包含WebSphereApplicationServer信任的自签名证书。
The WebServer plug-in configuration will automatically generate a plugin-key.kdb containing a self-signed certificate that is trusted by the WebSphere application servers.
现在，您的应用服务器密钥和信任文件的所有证书都已处于正确的位置。
All the certificates are now in the right places for your application server key and trust files.
这种证书都是由那些被信任的公司颁发的，而且为多个站点建立信任网，可是这类办法信任证书的公司却可以被黑客攻击。
Certificates are issued by companies that are trusted, and a "web of trust" is set up for multiple sites. But those companies can be attacked by hackers.
例如，如果由于没有加载所保存的信任证书，而不能对信任证书进行验证，那么是否继续进行通信，就完全取决于开发者了。
For example, if the trust cannot be verified because a trust certificate store has not been loaded, then whether to continue with the communication is strictly up to the developer.
现在您应该有了一个信任存储，您可以将信任的CA 的证书导入其中。
You should now have a truststore to which you can import certificates of trusted CAs.
将此CA指定为受信任证书颁发机构的客户机随时接受CA颁发的任何证书。
The clients that designate this ca as trusted will readily accept any certificates issued by the ca.
应用推荐