Annoyed! Website Certificate errors!

[red-beard]

I'm doing a bunch of stuff with the Gov't right now. EVERYTIME we connect to a bunch of the websites, I get a website certificate error. I called in and they don't care, told me not to worry about it.

It is annoying to have to click through a certificate error page EVERYTIME I change pages on the website.

[stomachmonkey]

If you view the certificate info you can manually set it to Trust and the pop ups should go away.

[red-beard]

I'm looking for a place in Explorer to manually set it to trust that domain.

[red-beard]

I think I found it under internet options-security-trusted sites

The top of the address bar is still pink and claims a cert error.

[stomachmonkey]

Originally Posted by red-beard

I think I found it under internet options-security-trusted sites

The top of the address bar is still pink and claims a cert error.

Sorry, don't know where it is in IE or FF on Windows.

On the other OS (X) the pop up allows you to manage the cert right inside it.

[emcon5]

It just means that the government issues their own certificates, and those certificates are not trusted automatically by Microsoft.

30 seconds with Google finds detailed instructions on how to add a certificate under IE, from (amusingly enough) Novell:

http://www.novell.com/coolsolutions/feature/18875.html

Note, only go as far as step 6, which is installing the certificate on your PC. The rest of the instructions are for pushing a certificate out to a bunch of computers, which you don't care about.

Tom

[slodave]

Funny all the government certs I deal with, have instructions.

[HardDrive]

Originally Posted by emcon5

30 seconds with Google finds detailed instructions on how to add a certificate under IE, from (amusingly enough) Novell:

I'm afraid its only amusing if your a network geek who has been around long enough to even remember Novell.

[red-beard]

Yeah, well, the directions didn't work. I downloaded and installed the certificate, and I still get the error.

Friggen' government website designers.

[RWebb]

there is some irony in you changing a setting to trust the govt. ...


which version of Internet Exploder are you using?

[red-beard]

8.0

[red-beard]

Originally Posted by RWebb

there is some irony in you changing a setting to trust the govt. ...

I will give you that...

[RWebb]

has it been upgrade to the latest MS patches? think there is one out just in the last couple of days.

you could also try Woody's Office <--- Google those key terms

they are full of experts on Windows & MS Office

[slodave]

Have you given this a try?

http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/sag_cmprocsimport.mspx?mfr=true

http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/sag_cmprocsimport.mspx?mfr=true

[mikester]

Are you sure their CERTs are actually good? It could be a number of things causing the error.

The cert itself could be expired, the intermediate certificate on the server (for the certificate authority - like verisign) could be expired or the dns name of the site could be different from the actual name on the certificate.

If the certificate is not configured properly and it's a production system, well, makes me wonder what else is overlooked...

Usually the error message tells you what is wrong with it - what's the error message?

[red-beard]

Here are the errors

[cashflyer]

I get that on DLA sites also.
I don't know how to avoid them. I see them so often, clicking through just becomes second nature.

It's probably Bill Gates' way of getting back at the government for the anti-trust BS.

[mikester]

It appears they are likely using a 'self signed' certificate. The encryption will still be good but the authenticity mechanism that is also part of the SSL system isn't being taken advantage of.