Am Sonntag, den 21.09.2008, 15:02 -0400 schrieb Markus Mottl:
> Hi Gerd,
> 
> I got the following browser error trying to access the Godi repo server:
> 
>   godirepo.camlcity.org uses an invalid security certificate.
> 
>   The certificate is not trusted because the issuer certificate is not 
> trusted.
> 
>   (Error code: sec_error_untrusted_issuer)
> 
> I don't know much about certification issues, but maybe you know how
> to fix this.

Yes, I know how to fix this, but it's expensive. It has to do with the
business model of some browser vendors - basically, trust centers pay
them for being included in the list of root certificates delivered with
the browser. If you buy a certificate from such a trust center, the
browser accepts the certificate without any problems. (And the browser
vendor gets money.)

Unfortunately, certificates from trust centers are expensive, and you
have to renew them regularly (every year/every two years). Something I
currently cannot afford - we don't use SSL for secure shopping, but only
for safely transmitting passwords. Spending hundreds of euros every year
for that purpose is out of question.

So I chose to use my own root certificate. In the past, the only effect
was that the browser showed a dialog that the certificate was not
trustworthy, but it nevertheless allowed the user to access the site
after pressing the OK button. Recent browsers, however (namely Mozilla),
changed that and do not let users in.

I don't know whether there is a way to revert to the old behavior with a
config setting, or with a browser extension. You can probably add my
root certificate to the list of trusted certificates:

http://www.gerd-stolpmann.de/ca.crt

I hope clicking on this link already solves your problem. Otherwise you
can also import the site certificate directly:

http://www.gerd-stolpmann.de/godirepo.camlcity.org.crt

Gerd

P.S. Forwarding to the godi mailing list, because of public interest
-- 
------------------------------------------------------------
Gerd Stolpmann * Viktoriastr. 45 * 64293 Darmstadt * Germany 
[EMAIL PROTECTED]          http://www.gerd-stolpmann.de
Phone: +49-6151-153855                  Fax: +49-6151-997714
------------------------------------------------------------


_______________________________________________
Godi-list mailing list
[email protected]
https://godirepo.camlcity.org/mailman/listinfo/godi-list

Reply via email to