Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.os.linux.networking > #3349

Re: Security issue

Show all headers | View raw

On 16-04-2015 22:21, J G Miller wrote:
> On Thursday, April 16th, 2015, at 15:10:53h +0100, Paulo da Silva asked:
> 
>> What, in simple words, does this mean?
...

> 
> So in cases such as this, the best thing to do is to click on
> "I understand the risks" then in the new dialog to click on
> "get certificate" and "view certificate" and very carefully
> read the details and the reason why Firefox thinks the certificate
> is not fully acceptable.
It says "for unknown reasons"

> 
>> Is it possible that each profile has its own certificates' list?
> 
> Yes this is most probably the reason that in one profile you clicked
> to accept the certificate and store it permanently as an exception.
> 
> You can check the certificates list which have been accepted via
> Edit -> Preferences menu, then Advance button, then Certificates tab,
> then View Certificates button.
I checked and in both profiles "MULTICERT - Entidade de Certificação
001" is there!
I created a new profile and I couldn't also enter in the site. I created
a permanent exception and "MULTICERT - Entidade de Certificação
001" was created under "servers" tab but under a different root than
that under "authority" tab. Besides, the other previous profile from
which I can also directly enter the site does not have this entry under
"servers" tab. So I cannot understand what is different between both
previous profiles and where the differences, if any, came from.

Anyway this is a gov site. So I'll add a permanent exception. What is
causing me problems is the firefox statement "If you usually connect to
this site regularly without problems, this error could mean that someone
is trying to pass himself off by this site
and as such you should not continue."
But I think this should not be possible because I have at least one
profile that does not issue this pop up message. Am I right?

> 
>> Where do these certificates come from?
> 
> From the site that you visit using the https address.
I am referring to the ones listed in the firefox. Does firefox comes
with them? Is it possible to change them only by visiting some site?
Are they in the user dir (kubuntu here)?

Thanks and sorry for too many questions :-)

Back to comp.os.linux.networking | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Security issue Paulo da Silva <p_s_d_a_s_i_l_v_a_ns@netcabo.pt> - 2015-04-16 15:10 +0100
  Re: Security issue J G Miller <miller@yoyo.ORG> - 2015-04-16 21:21 +0000
    Re: Security issue Paulo da Silva <p_s_d_a_s_i_l_v_a_ns@netcabo.pt> - 2015-04-17 01:38 +0100
      Re: Security issue J G Miller <miller@yoyo.ORG> - 2015-04-18 20:21 +0000
        Re: Security issue Paulo da Silva <p_s_d_a_s_i_l_v_a_ns@netcabo.pt> - 2015-04-20 01:55 +0100
          Re: Security issue "John F" <j@j.ii> - 2015-04-22 13:36 -0700
  Re: Security issue Christian Riechers <chriechers@netscape.net.invalid> - 2015-04-18 07:52 +0200

csiph-web