Re: SSL problem diagnosis tool

2009-02-04 Thread Gervase Markham
Jean-Marc Desperrier wrote: Gerv, what about changing the Firefox SSL page/implementation so that in that situation, for those 99% of the market, it gives the most informative information, non scary, non blocking possible ? Even when there was an error in the configuration ? I'm not sure we

Re: SSL problem diagnosis tool

2009-02-04 Thread Eddy Nigg
On 02/04/2009 11:28 AM, Gervase Markham: Jean-Marc Desperrier wrote: Gerv, what about changing the Firefox SSL page/implementation so that in that situation, for those 99% of the market, it gives the most informative information, non scary, non blocking possible ? Even when there was an error

Re: SSL problem diagnosis tool

2009-02-04 Thread Kyle Hamilton
Realistically, the only way to describe this kind of thing to an end-user is to bring up something -- in a language the user can understand -- that explains what's going on with the connection. My current thinking is that this needs to be brought up for all connections, not just connections that

Re: SSL problem diagnosis tool

2009-02-04 Thread Ian G
On 4/2/09 10:49, Kyle Hamilton wrote: Realistically, the only way to describe this kind of thing to an end-user is to bring up something -- in a language the user can understand -- that explains what's going on with the connection. My current thinking is that this needs to be brought up for all

Re: SSL problem diagnosis tool

2009-01-30 Thread Jean-Marc Desperrier
Ian G wrote: On 29/1/09 19:24, Nelson B Bolyard wrote: Ian G wrote, On 2009-01-29 10:01: [...] when firefox trips over a cert, it could show something like that. | There is a problem with this cert! | | == *The cert was not issued by a known CA*== | The cert has expired or is not yet valid

Re: SSL problem diagnosis tool

2009-01-30 Thread Ian G
On 30/1/09 13:25, Jean-Marc Desperrier wrote: Ian G wrote: Ian G wrote, On 2009-01-29 10:01: [...] when firefox trips over a cert, it could show something like that. | There is a problem with this cert! | | == *The cert was not issued by a known CA*== | The cert has expired or is not yet

Re: SSL problem diagnosis tool

2009-01-29 Thread Jean-Marc Desperrier
Gervase Markham wrote: Robertss wrote: Thanks, Gerv! I went through each of the providers websites and found their main support pages. I have added links to them on this page: http://www.sslshopper.com/ssl-certificate-not-trusted-error.html I can tell you that you have covered 96% of the CA

Re: SSL problem diagnosis tool

2009-01-29 Thread Eddy Nigg
On 01/29/2009 02:31 PM, Jean-Marc Desperrier: Gerv, what about changing the Firefox SSL page/implementation so that in that situation, for those 99% of the market, it gives the most informative information, non scary, non blocking possible ? Even when there was an error in the configuration ?

Re: SSL problem diagnosis tool

2009-01-29 Thread Ian G
On 29/1/09 13:31, Jean-Marc Desperrier wrote: Gervase Markham wrote: Robertss wrote: http://www.sslshopper.com/ssl-certificate-not-trusted-error.html ... Gerv, what about changing the Firefox SSL page/implementation so that in that situation, for those 99% of the market, it gives the most

Re: SSL problem diagnosis tool

2009-01-29 Thread Johnathan Nightingale
On 29-Jan-09, at 8:29 AM, Ian G wrote: On 29/1/09 13:31, Jean-Marc Desperrier wrote: Gerv, what about changing the Firefox SSL page/implementation so that in that situation, for those 99% of the market, it gives the most informative information, non scary, non blocking possible ? Even when

Re: SSL problem diagnosis tool

2009-01-29 Thread Eddy Nigg
On 01/29/2009 06:36 PM, Johnathan Nightingale: I think I'm hearing an RFE to change the cert error page to link to elaborated information elsewhere (probably on support.mozilla.com, but maybe on mozilla.com itself) which explains this problem to users, possibly with a section for site

Re: SSL problem diagnosis tool

2009-01-29 Thread Ian G
On 29/1/09 17:36, Johnathan Nightingale wrote: On 29-Jan-09, at 8:29 AM, Ian G wrote: On 29/1/09 13:31, Jean-Marc Desperrier wrote: Gerv, what about changing the Firefox SSL page/implementation so that in that situation, for those 99% of the market, it gives the most informative information,

Re: SSL problem diagnosis tool

2009-01-29 Thread Nelson B Bolyard
Ian G wrote, On 2009-01-29 10:01: Hmm, nope, apologies, I wasn't clear. What I wanted was something like the behaviour shown on that page, when it comes in contact with a cert, to be incorporated as behaviour in firefox. So that when firefox trips over a cert, it could show something like

Re: SSL problem diagnosis tool

2009-01-29 Thread Ian G
On 29/1/09 19:24, Nelson B Bolyard wrote: Ian G wrote, On 2009-01-29 10:01: Hmm, nope, apologies, I wasn't clear. What I wanted was something like the behaviour shown on that page, when it comes in contact with a cert, to be incorporated as behaviour in firefox. So that when firefox trips

Re: SSL problem diagnosis tool

2009-01-28 Thread Gervase Markham
Robertss wrote: Thanks, Gerv! I went through each of the providers websites and found their main support pages. I have added links to them on this page: http://www.sslshopper.com/ssl-certificate-not-trusted-error.html I can tell you that you have covered 96% of the CA market with the list you

Re: SSL problem diagnosis tool

2009-01-21 Thread Robertss
On Jan 20, 9:35 pm, Gervase Markham g...@mozilla.org wrote: If you can give us a URL to a page which will always show the entire list you currently have, perhaps people in this group can add to it. Gerv Thanks, Gerv! I went through each of the providers websites and found their main support

Re: SSL problem diagnosis tool

2009-01-20 Thread Jean-Marc Desperrier
Gervase Markham wrote: I just came across this: http://www.sslshopper.com/ssl-checker.html Rather nice, particularly for people with intermediate cert chain errors. It would be even better if there was an independent version of such a tool, which could link you through to the fix it pages for

Re: SSL problem diagnosis tool

2009-01-20 Thread Robertss
On Jan 19, 3:22 pm, Gervase Markham g...@mozilla.org wrote: I just came across this:http://www.sslshopper.com/ssl-checker.html Rather nice, particularly for people with intermediate cert chain errors. It would be even better if there was an independent version of such a tool, which could link

Re: SSL problem diagnosis tool

2009-01-20 Thread Gervase Markham
Robertss wrote: Thanks for pointing this tool out. I actually helped create it. I included a link to a page that explains why an error is given when an Intermediate certificate cert is missing but I didn't include specific instructions on how to fix it because each certificate provider is

SSL problem diagnosis tool

2009-01-19 Thread Gervase Markham
I just came across this: http://www.sslshopper.com/ssl-checker.html Rather nice, particularly for people with intermediate cert chain errors. It would be even better if there was an independent version of such a tool, which could link you through to the fix it pages for certificate providers who