Arch Linux

Knute

Member

From: Minot, ND

Registered: 2009-03-17

Posts: 604

[Solved]Invalid certificate notification on "Forums" on main pg.

I am useing firefox-hg, and just a few minutes ago, I got the attached screen that popped up after I clicked the "Forums" link from the main page.

This

Connection is

Untrusted

You have asked

Minefield to connect

securely to

bbs.archlinux.org,

but we can't confirm

that your connection is

secure.

Untrusted Connection about:certerror?e=nssBadCert&u=https://bbs.archl...

1 of 6 08/04/2010 05:49 PMNormally, when you try

to connect securely,

sites will present trusted

identification to prove

that you are going to

the right place.

However, this site's

identity can't be verified.

What Should I

Do?

If you usually connect to

this site without

problems, this error

could mean that

someone is trying to

impersonate the site,

and you shouldn't

Untrusted Connection about:certerror?e=nssBadCert&u=https://bbs.archl...

2 of 6 08/04/2010 05:49 PMcontinue.

Get me out of here!

bbs.archlinux.org uses 

an invalid security 

certificate.

The certificate is not 

trusted because the 

issuer certificate is not 

trusted.

(Error code: 

sec_error_untrusted_issuer

Technical

Details

Untrusted Connection about:certerror?e=nssBadCert&u=https://bbs.archl...

3 of 6 08/04/2010 05:49 PMI Understand

the Risks

Untrusted Connection about:certerror?e=nssBadCert&u=https://bbs.archl...

4 of 6 08/04/2010 05:49 PMIf you understand

what's going on, you

can tell Minefield to

start trusting this site's

identification. Even if

you trust the site,

this error could

mean that someone

is tampering with

your connection.

Don't add an exception

unless you know there's

a good reason why this

site doesn't use trusted

identification.

Add Exception…

Untrusted Connection about:certerror?e=nssBadCert&u=https://bbs.archl...

5 of 6 08/04/2010 05:49 PMUntrusted Connection about:certerror?e=nssBadCert&u=https://bbs.archl...

6 of 6 08/04/2010 05:49 PM

I just thought that you should be notified, in case it's more than just an expired certificate after the recent upgrade.

I printed it out to a pdf file, and then copied and pasted it.  Don't know if it'll come up again or not, though.

Last edited by Knute (2010-08-04 23:44:06)

---

Knute

sand_man

Member

From: Australia

Registered: 2008-06-10

Posts: 2,164

Re: [Solved]Invalid certificate notification on "Forums" on main pg.

https://bbs.archlinux.org/viewtopic.php … 51#p792851
You need to install cacerts.

---

Knute

Member

From: Minot, ND

Registered: 2009-03-17

Posts: 604

Re: [Solved]Invalid certificate notification on "Forums" on main pg.

I have ca-certificates installed as well as ca-certificates-java.  They are dated 20090814-3, and the java one is 20090629-2.

Is there a newer version that I need?

I had a drive die on me recently and had to reload, so I may have missed a repository somewhere. 

---

Knute

anonymous_user

Member

Registered: 2009-08-28

Posts: 3,059

Re: [Solved]Invalid certificate notification on "Forums" on main pg.

You need to install the certs (PEM format) from this page:

http://www.cacert.org/index.php?id=3

And when adding them, check the boxes for websites and email.

Knute

Member

From: Minot, ND

Registered: 2009-03-17

Posts: 604

Re: [Solved]Invalid certificate notification on "Forums" on main pg.

That is helpful.  However,  after rebooting... kernel upgrade,  I came back in to check and see what would happen, and there was no error about it any longer.

I'll still check these out, as it's something new. 

Thanks!

---

Knute