Use this openssl command to obtain the full hierarchy including the root
CA. This should be what you need to import the certs into your version
of Firefox.
openssl s_client -connect webbroker.tdwaterhouse.ca:443 -showcerts
If you wish to automate it, you do so via 'certutil' and using the
directory that houses your 'cert8.db' file.
On 08/25/2011 05:26 PM, t...@terralogic.net wrote:
Web broker.
Also they seem to have broken their web site in other ways.
I just hate it when they figure they should reprogram my browser so I can't
right click on a link and open in a new window. I do run multiple monitors and
its nice to put a press release on one monitor and another press release on
another monitor while having the main window on yet a 3rd monitor.
Their mind set seems to be like if you want to use our service then switch your
machine to windows... toss out the extra monitors and set the display to
800x600.
Well not quite that bad but close.
If I have much more trouble with them I'm going to close my accounts.
On Thu, Aug 25, 2011 at 05:08:40PM -0400, Crypto Sal wrote:
Do you log into 'Web Broker' or 'Easy Web'?
On 08/25/2011 04:50 PM, t...@terralogic.net wrote:
Sorry
http://www.tdwaterhouse.ca/
Its my old cert chain which is broken. I jsut want to go to them and ask them
to supply the root cert so I can install it and get rid of the error message
which Firefox generates because I can't find the root cert.
On Thu, Aug 25, 2011 at 04:44:07PM -0400, Crypto Sal wrote:
Can you please *be* specific and provide us with an exact URL for those
of thus that don't live in Canada or use TDWaterhouse? I see TD has
several sites and this is why we need you to be specific so we can tell
you which root to get.
On 08/25/2011 03:06 PM, t...@terralogic.net wrote:
TDWaterhouse In Canada. I'm in Calgary. THose idjots tell me to reboot my
computer when their Apache servers in TO send me a misconfiguration message. I
told them yesterday we build it and you break it. Something is desperatly
wrong.
On Thu, Aug 25, 2011 at 02:10:11PM -0400, Crypto Sal wrote:
Firefox has its own certificate store. It doesn't share '/etc/ssl/certs'.
If we had the bank URL, we would be able to better help you to resolve
this issue.
On 08/25/2011 01:45 PM, t...@terralogic.net wrote:
I know you are trying to help. But it doesn't help me to defer to a package
manager because I'm trying to fix what the last package managers screwed up.
On Thu, Aug 25, 2011 at 04:09:44AM -0500, Michael S. Zick wrote:
On Wed August 24 2011, t...@terralogic.net wrote:
Top posting to a hijacked thread is not the way to get
a quick and useful reply.
Next time, start your own. Mailing list threads are cheap.
I see my bank has an invalid cert. Likely I have an old cert chain. I'm
running Debian Linux and firefox.
Use anyone of the distribution provided package managers to download and
install the most recently released package of certificates.
Can anyone tell me where to install a valid root cert? Like what directory?
I would think the bank should be able to provide the root of the chain.
I'll need to know SPECICALLY what to ask them for.
Asking the operator of the site you wish to authenticate for the certificate
is similar to asking the Fox to guard your Chicken House.
Get the root certificate from an "independent", trusted, source.
Using your distribution's package management will take care of that concern.
I've created my own certs of course but just not recently.
Also I never tried to install the CA cert for firefox.
Your distribution's package manager already has that handled.
All you have to do is use it.
Mike
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users@openssl.org
Automated List Manager majord...@openssl.org
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users@openssl.org
Automated List Manager majord...@openssl.org
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users@openssl.org
Automated List Manager majord...@openssl.org
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users@openssl.org
Automated List Manager majord...@openssl.org
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users@openssl.org
Automated List Manager majord...@openssl.org
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users@openssl.org
Automated List Manager majord...@openssl.org
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users@openssl.org
Automated List Manager majord...@openssl.org
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users@openssl.org
Automated List Manager majord...@openssl.org
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users@openssl.org
Automated List Manager majord...@openssl.org
