[tdf-discuss] Re: About Cacert SSL certificates (was: Feature request for 3.3 still possible?)

On 11/09/2010 03:45 AM, David Nelson wrote:
> Hi Guy, :-)
>
> On Tue, Nov 9, 2010 at 18:13, Guy Voets <nimantuis@gmail.com> wrote:
> > You have asked SeaMonkey to connect securely to bugs.freedesktop.org,
> > but we can't confirm that your connection is secure.
> >
> > Normally, when you try to connect securely, sites will present trusted
> > identification to prove that you are going to the right place.
> > However, this site's identity can't be verified.
> >
> > What Should I Do?
> > If you usually connect to this site without problems, this error could
> > mean that someone is trying to impersonate the site, and you shouldn't
> > continue.
>
> It's happening because the project is using a free certificate
> provider (http://cacert.org). Cacert is not configured in most
> browsers as one of the "trusted providers". However, technically,
> their certificates do their job just fine. It's a "political" thing.
> Certificates are sold by corporations such as Verisign for quite a lot
> of money, and the big boys don't like a free provider like Cacert
> spoiling their otherwise-captive market. Don't worry, you can accept
> the certificate and add it to your browser's list of trusted
> providers. Neither Cacert nor the bug tracker site is trying to scam
> you.
>
> I've seen this question posted before a few times, so I'll post this
> answer in a dedicated thread. HTH.
>
> David Nelson

It's not purely political...
http://wiki.cacert.org/InclusionStatus

Still having issues:
===
bugs.freedesktop.org uses an invalid security certificate.

The certificate does not come from a trusted source.
The certificate is only valid for <a id="cert_domain_link"
title="bugs.freedesktop.org">bugs.freedesktop.org</a>
===

Even when the certs are already installed:
http://www.cacert.org/index.php?id=3
per
http://wiki.cacert.org/BrowserClients
Cleared & reinstalled the certs & lo & behold:
====
bugs.freedesktop.org uses an invalid security certificate.

The certificate expired on 11/19/2010 08:23 PM.

(Error code: sec_error_expired_certificate)
====
Not valid after:
11/19/2010 20:23:04
(11/20/2010 04:23:04 GMT)

Had to make a temporary exception (again) in order to post to:
https://bugs.freedesktop.org/show_bug.cgi?id=20250
[Bug 20250 - freedesktop bug database uses certificate signed by CA not
recognized by Mozilla]




-- 
Unsubscribe instructions: E-mail to discuss+help@documentfoundation.org
Archive: http://www.documentfoundation.org/lists/discuss/
*** All posts to this list are publicly archived for eternity ***