Re: Firefox 3 connection now results in ssl_error_bad_cert_domain

2008-07-03 Thread Bruce Keats
first. Thanks again, Bruce On Jul 2, 7:37 pm, Nelson B Bolyard [EMAIL PROTECTED] wrote: Bruce Keats wrote, On 2008-07-02 14:52: Thanks for the help.  That answers a lot of questions, but raises some more. I assume that firefox is trying to match with the hostname (portion of the URL) or the IP

Firefox 3 connection now results in ssl_error_bad_cert_domain

2008-07-02 Thread Bruce Keats
Hi, I started using firefox 3 and I am now getting errors connecting to intra-net sites that were OK in firefox 2. We have our own intra-net and we have a CA that issues server certs and user certs. I have loaded the CA certs and the CA certs are visable under Authorities tab

Re: Firefox 3 connection now results in ssl_error_bad_cert_domain

2008-07-02 Thread Bruce Keats
Thanks for the help. That answers a lot of questions, but raises some more. On Wed, Jul 2, 2008 at 5:01 PM, Nelson B Bolyard [EMAIL PROTECTED] wrote: That error means one thing: the name(s) in the cert do not match the name (or IP address) of the server given in the URL. Nothing you can

Re: Terminating SSL on the web proxy

2007-12-10 Thread Bruce Keats
I was curious about the last scenario. 2. The Server Side Proxy (a.k.a., Reverse Proxy) Public Internet Intranet [browser]-[proxy]--[server] SSL plain In this case, does the proxy have to convert the

Re: Problems with getting OCSP to work with firefox 2.0.0.8 (Fedora Core 7)

2007-11-02 Thread Bruce Keats
PROTECTED] wrote: Now I don't know much more, except as Nelson already mentioned that the CA root might not be installed in the browser. If the problem persist, an actual certificate and domain responder location etc is needed in order to get a better picture. Bruce Keats wrote: OK

Is firefox 2.0.0.8 suppose to try different OCSP responders?

2007-11-02 Thread Bruce Keats
Now that I have the OCSP responder stuff working, I started playing around with how firefox uses the AIA records. In the end entity certificates, I have setup AIA that lists three OCSP responders, namely: Not Critical OCSP: URI: http://server1:9000 OCSP: URI: http://server2:9000 OCSP: URI:

Re: Problems with getting OCSP to work with firefox 2.0.0.8 (Fedora Core 7)

2007-11-01 Thread Bruce Keats
also off-list if you feel more comfortable... -- RegardsSigner: Eddy Nigg, StartCom Ltd. http://www.startcom.org/ Jabber: [EMAIL PROTECTED] Blog: Join the Revolution!http://blog.startcom.org/ Phone: +1.213.341.0390 Bruce Keats wrote: Hi, I am having problems getting firefox