Am Sonntag, den 21.09.2008, 15:02 -0400 schrieb Markus Mottl: > Hi Gerd, > > I got the following browser error trying to access the Godi repo server: > > godirepo.camlcity.org uses an invalid security certificate. > > The certificate is not trusted because the issuer certificate is not > trusted. > > (Error code: sec_error_untrusted_issuer) > > I don't know much about certification issues, but maybe you know how > to fix this.
Yes, I know how to fix this, but it's expensive. It has to do with the business model of some browser vendors - basically, trust centers pay them for being included in the list of root certificates delivered with the browser. If you buy a certificate from such a trust center, the browser accepts the certificate without any problems. (And the browser vendor gets money.) Unfortunately, certificates from trust centers are expensive, and you have to renew them regularly (every year/every two years). Something I currently cannot afford - we don't use SSL for secure shopping, but only for safely transmitting passwords. Spending hundreds of euros every year for that purpose is out of question. So I chose to use my own root certificate. In the past, the only effect was that the browser showed a dialog that the certificate was not trustworthy, but it nevertheless allowed the user to access the site after pressing the OK button. Recent browsers, however (namely Mozilla), changed that and do not let users in. I don't know whether there is a way to revert to the old behavior with a config setting, or with a browser extension. You can probably add my root certificate to the list of trusted certificates: http://www.gerd-stolpmann.de/ca.crt I hope clicking on this link already solves your problem. Otherwise you can also import the site certificate directly: http://www.gerd-stolpmann.de/godirepo.camlcity.org.crt Gerd P.S. Forwarding to the godi mailing list, because of public interest -- ------------------------------------------------------------ Gerd Stolpmann * Viktoriastr. 45 * 64293 Darmstadt * Germany [EMAIL PROTECTED] http://www.gerd-stolpmann.de Phone: +49-6151-153855 Fax: +49-6151-997714 ------------------------------------------------------------ _______________________________________________ Godi-list mailing list [email protected] https://godirepo.camlcity.org/mailman/listinfo/godi-list
