On Thu August 25 2011, t...@terralogic.net wrote: > Sorry > > http://www.tdwaterhouse.ca/ > > Its my old cert chain which is broken. > I jsut want to go to them and ask them to supply the root cert so I can > install it and get rid of the error message which Firefox generates because > I can't find the root cert. >
My Debian V-5 system browsers report: "Certificate signing authority is unknown or invalid." My Debian V-6 system browsers considers the chain valid. Translation: Update your OS installation. Mike > > On Thu, Aug 25, 2011 at 04:44:07PM -0400, Crypto Sal wrote: > > Can you please *be* specific and provide us with an exact URL for those > > of thus that don't live in Canada or use TDWaterhouse? I see TD has > > several sites and this is why we need you to be specific so we can tell > > you which root to get. > > > > > > On 08/25/2011 03:06 PM, t...@terralogic.net wrote: > > > TDWaterhouse In Canada. I'm in Calgary. THose idjots tell me to reboot > > > my computer when their Apache servers in TO send me a misconfiguration > > > message. I told them yesterday we build it and you break it. Something > > > is desperatly wrong. > > > > > > > > > On Thu, Aug 25, 2011 at 02:10:11PM -0400, Crypto Sal wrote: > > >> Firefox has its own certificate store. It doesn't share '/etc/ssl/certs'. > > >> > > >> If we had the bank URL, we would be able to better help you to resolve > > >> this issue. > > >> > > >> > > >> On 08/25/2011 01:45 PM, t...@terralogic.net wrote: > > >>> I know you are trying to help. But it doesn't help me to defer to a > > >>> package manager because I'm trying to fix what the last package > > >>> managers screwed up. > > >>> > > >>> On Thu, Aug 25, 2011 at 04:09:44AM -0500, Michael S. Zick wrote: > > >>>> On Wed August 24 2011, t...@terralogic.net wrote: > > >>>> Top posting to a hijacked thread is not the way to get > > >>>> a quick and useful reply. > > >>>> Next time, start your own. Mailing list threads are cheap. > > >>>> > > >>>>> I see my bank has an invalid cert. Likely I have an old cert chain. > > >>>>> I'm running Debian Linux and firefox. > > >>>>> > > >>>> Use anyone of the distribution provided package managers to download > > >>>> and > > >>>> install the most recently released package of certificates. > > >>>> > > >>>>> Can anyone tell me where to install a valid root cert? Like what > > >>>>> directory? > > >>>>> I would think the bank should be able to provide the root of the > > >>>>> chain. > > >>>>> I'll need to know SPECICALLY what to ask them for. > > >>>>> > > >>>> Asking the operator of the site you wish to authenticate for the > > >>>> certificate > > >>>> is similar to asking the Fox to guard your Chicken House. > > >>>> > > >>>> Get the root certificate from an "independent", trusted, source. > > >>>> Using your distribution's package management will take care of that > > >>>> concern. > > >>>> > > >>>>> I've created my own certs of course but just not recently. > > >>>>> Also I never tried to install the CA cert for firefox. > > >>>>> > > >>>> Your distribution's package manager already has that handled. > > >>>> All you have to do is use it. > > >>>> > > >>>> Mike > > >>>> ______________________________________________________________________ > > >>>> OpenSSL Project http://www.openssl.org > > >>>> User Support Mailing List openssl-users@openssl.org > > >>>> Automated List Manager majord...@openssl.org > > >>> ______________________________________________________________________ > > >>> OpenSSL Project http://www.openssl.org > > >>> User Support Mailing List openssl-users@openssl.org > > >>> Automated List Manager majord...@openssl.org > > >>> > > >> ______________________________________________________________________ > > >> OpenSSL Project http://www.openssl.org > > >> User Support Mailing List openssl-users@openssl.org > > >> Automated List Manager majord...@openssl.org > > > ______________________________________________________________________ > > > OpenSSL Project http://www.openssl.org > > > User Support Mailing List openssl-users@openssl.org > > > Automated List Manager majord...@openssl.org > > > > > > > ______________________________________________________________________ > > OpenSSL Project http://www.openssl.org > > User Support Mailing List openssl-users@openssl.org > > Automated List Manager majord...@openssl.org > ______________________________________________________________________ > OpenSSL Project http://www.openssl.org > User Support Mailing List openssl-users@openssl.org > Automated List Manager majord...@openssl.org > > ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org
