On Thu August 25 2011, t...@terralogic.net wrote: > Sorry > > http://www.tdwaterhouse.ca/ > > Its my old cert chain which is broken. I jsut want to go to them and ask > them to supply the root cert so I can install it and get rid of the error > message which Firefox generates because I can't find the root cert.
They are the wrong people to ask. Capture the certificate chain being sent by their server, examine it to find what "root cert" you need, then get that "root cert" from somewhere else, somewhere you can trust. The entire concept of "third party trust" is broken when you by-pass the third party. ;-) Mike > > > On Thu, Aug 25, 2011 at 04:44:07PM -0400, Crypto Sal wrote: > > Can you please *be* specific and provide us with an exact URL for those > > of thus that don't live in Canada or use TDWaterhouse? I see TD has > > several sites and this is why we need you to be specific so we can tell > > you which root to get. > > > > > > On 08/25/2011 03:06 PM, t...@terralogic.net wrote: > > > TDWaterhouse In Canada. I'm in Calgary. THose idjots tell me to reboot > > > my computer when their Apache servers in TO send me a misconfiguration > > > message. I told them yesterday we build it and you break it. Something > > > is desperatly wrong. > > > > > > > > > On Thu, Aug 25, 2011 at 02:10:11PM -0400, Crypto Sal wrote: > > >> Firefox has its own certificate store. It doesn't share '/etc/ssl/certs'. > > >> > > >> If we had the bank URL, we would be able to better help you to resolve > > >> this issue. > > >> > > >> > > >> On 08/25/2011 01:45 PM, t...@terralogic.net wrote: > > >>> I know you are trying to help. But it doesn't help me to defer to a > > >>> package manager because I'm trying to fix what the last package > > >>> managers screwed up. > > >>> > > >>> On Thu, Aug 25, 2011 at 04:09:44AM -0500, Michael S. Zick wrote: > > >>>> On Wed August 24 2011, t...@terralogic.net wrote: > > >>>> Top posting to a hijacked thread is not the way to get > > >>>> a quick and useful reply. > > >>>> Next time, start your own. Mailing list threads are cheap. > > >>>> > > >>>>> I see my bank has an invalid cert. Likely I have an old cert chain. > > >>>>> I'm running Debian Linux and firefox. > > >>>>> > > >>>> Use anyone of the distribution provided package managers to download > > >>>> and > > >>>> install the most recently released package of certificates. > > >>>> > > >>>>> Can anyone tell me where to install a valid root cert? Like what > > >>>>> directory? > > >>>>> I would think the bank should be able to provide the root of the > > >>>>> chain. > > >>>>> I'll need to know SPECICALLY what to ask them for. > > >>>>> > > >>>> Asking the operator of the site you wish to authenticate for the > > >>>> certificate > > >>>> is similar to asking the Fox to guard your Chicken House. > > >>>> > > >>>> Get the root certificate from an "independent", trusted, source. > > >>>> Using your distribution's package management will take care of that > > >>>> concern. > > >>>> > > >>>>> I've created my own certs of course but just not recently. > > >>>>> Also I never tried to install the CA cert for firefox. > > >>>>> > > >>>> Your distribution's package manager already has that handled. > > >>>> All you have to do is use it. > > >>>> > > >>>> Mike > > >>>> ______________________________________________________________________ > > >>>> OpenSSL Project http://www.openssl.org > > >>>> User Support Mailing List openssl-users@openssl.org > > >>>> Automated List Manager majord...@openssl.org > > >>> ______________________________________________________________________ > > >>> OpenSSL Project http://www.openssl.org > > >>> User Support Mailing List openssl-users@openssl.org > > >>> Automated List Manager majord...@openssl.org > > >>> > > >> ______________________________________________________________________ > > >> OpenSSL Project http://www.openssl.org > > >> User Support Mailing List openssl-users@openssl.org > > >> Automated List Manager majord...@openssl.org > > > ______________________________________________________________________ > > > OpenSSL Project http://www.openssl.org > > > User Support Mailing List openssl-users@openssl.org > > > Automated List Manager majord...@openssl.org > > > > > > > ______________________________________________________________________ > > OpenSSL Project http://www.openssl.org > > User Support Mailing List openssl-users@openssl.org > > Automated List Manager majord...@openssl.org > ______________________________________________________________________ > OpenSSL Project http://www.openssl.org > User Support Mailing List openssl-users@openssl.org > Automated List Manager majord...@openssl.org > > ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org
