Keytool - HTTPS

Question

Good afternoon.
There are pages in my application that should have the https protocol.
For this reason, I had to use tool keytool.
First, i create a certificate keystore by executing the following command in the msdos prompt:
%JAVA_HOME%\bin\keytool -genkey -alias tomcat -keyalg RSAWith this, i can easily create a "self-signed" certificate
Second, i uncomment the "SSL HTTP/1.1 Connector" entry in $CATALINA_HOME/conf/server.xml.
This works and i can see this pages with https protocol.
However, I have a number of doubts.
1.When I go to the page with https protocol, I see two dialogs.
--The first shows the following text:
"Unable to verify the identity of 'My name' site as a reliable"
--The second shows the following text:
"Error safety: The domain name does not match. He has tried to establish a connection with 'localhost'. however, the safety certificate presented belongs to
'My name'. It is possible, though unlikely, that this someone trying to intercept your communication with this site."
How can I avoid these 2 dialogs?
2.Does a "self-signed" certificate is as safe as a certificate purchased from a well-known Certificate Authority (CA) such as VeriSign?
Are all these certificates cost money? What are the best? What are the cheapest?
3.I read that the first time a person attempts to access a secured page on a site (with "self-signed" certificate), he is typically presented with a dialog containing the details of the certificate (such as the company and contact name), and asked if I wishes to accept the Certificate as valid and continue with the transaction.
Do the same thing happen with a certificate purchased from a well-known Certificate Authority?
Is there a way to avoid this dialog?

Answer 1

How can I avoid these 2 dialogs? Put the correct hostname into the certificate when you create it.
2.Does a "self-signed" certificate is as safe as a certificate purchased from a well-known Certificate Authority (CA) such as VeriSign?No, unless you can arrange for the client to trust your self-signed certificate. This is what the dialog is for.
Do the same thing happen with a certificate purchased from a well-known Certificate Authority?No, because the client already trusts the CA.