How to stop this symptom:
I get this problem as well. This is a known bug with Firefox's HTTPS
code that we have no power over that causes it to reject the new CA
certificate despite the fact it is validly related to the one already in
your browser.
You can rectify the situation by doing the following in Firefox:
Tools -> Options [Edit -> Preferences on Linux)
Advanced -> Certificates -> Manage Certificates
Authorities tab
Click CA
Click Delete, and delete it.
Then you need to go to http://ca.grid-support.ac.uk
<http://ca.grid-support.ac.uk/> and download the CA root.
Then:
Tools -> Options [Edit -> Preferences on Linux)
Advanced -> Certificates -> Manage Certificates
Authorities tab
Click Import
Find the CA root you downloaded
Tick all checkboxes and click OK.
Then https://ca.grid-support.ac.uk will work.
Grid Operations Support Centre
-----Original Message-----
From: The UK High Energy Physics GRID List
[mailto:[log in to unmask]] On Behalf Of Ben Waugh
Sent: 26 May 2005 16:05
To: [log in to unmask]
Subject: Re: CA change on www.gridpp.ac.uk
On Thu, 26 May 2005, Andrew McNab wrote:
> Ben Waugh wrote:
> >
> > Or, slightly more simply (I think), you can go to
> > https://ca.grid-support.ac.uk/ (clicking OK to accept the site
> > certificate) then import the root certificate via CA Info | Get CA
> > Certificate | CA Certificate in CRT Format.
>
> But if you have the old CA root loaded already, it says the
> certificate of ca.grid-support.ac.uk is invalid before you get to that
> point, and refuses to let you load the page. (Certainly Firefox does
> this, I've not checked with Netscape/Mozilla.)
Ah yes, that's true. I think I must have deleted the old root
certificate
first, which probably makes your solution simpler after all.
Ben
>
> Cheers,
>
> Andrew
>
--
Dr Ben Waugh Tel. +44 (0)20 7679
3783
Dept of Physics and Astronomy Internal: 33783
University College London
London WC1E 6BT
|