Avatar for Username

搜索 | 用户支持

防范以用户支持为名的诈骗。我们绝对不会要求您拨打电话或发送短信，及提供任何个人信息。请使用“举报滥用”选项报告涉及违规的行为。

详细了解

话题已存档。 如果需要帮助请提出新问题。

Untrusted connection - but certificate is valid - can not proceed

  • 2 个回答
  • 27 人有此问题
  • 1 次查看
  • 最后回复者为 Arackhaen

Arackhaen
Arackhaen
more options

I'm connecting to a webmail server. This server provides a certificate through IIS, that is trusted by a self-signed certificate. Firefox connects to site and gives me untrusted-connection page. This is common when server's certificate is based on a self-signed CA certificate. But now I can not accept security policy exception. Certificate-window just says that certificate is valid. Well yes, certificate is valid if you ask me, but why it then shows untrusted connection -page? I can't access this site, because it shows untrusted connection and I can't press "confirm security exception", because that button is not available (grayed, because mozilla says certificate is valid).

I'm connecting to a webmail server. This server provides a certificate through IIS, that is trusted by a self-signed certificate. Firefox connects to site and gives me untrusted-connection page. This is common when server's certificate is based on a self-signed CA certificate. But now I can not accept security policy exception. Certificate-window just says that certificate is valid. Well yes, certificate is valid if you ask me, but why it then shows untrusted connection -page? I can't access this site, because it shows untrusted connection and I can't press "confirm security exception", because that button is not available (grayed, because mozilla says certificate is valid).

所有回复 (2)

Aman Routh
Aman Routh
more options

Please check your Date and Time Setting and see if they are valid or not. If Date and Time are correct then

Maybe you pass through a proxy server? Check your setting Proxy Settings Proxy Settings and select No Proxy.

Arackhaen
Arackhaen 提问者
more options

No proxy in use and date and time are ok. I have checked all simple reasons, that I know of.

BTW Konqueror did respond with more details: "The server failed the authenticity check (server.name.tld). The certificate authority's certificate is invalid The root certificate authority's certificate is not trusted for this purpose The certificate cannot be verified for internal reasons".

So if this is correct, possibly Firefox is dealing with same thing, but didn't tell the reason. CA certificate for this is going to be renewed before next year, so maybe that will give us answer to this. How to add purposes to openssl.conf for CA certs?