Hi,

It does suck a bit, but there seems to be nothing we can do about this
apart from asking users to upgrade their browsers (so they have the
up-to-date certificates installed with it), that they blindly accept
the certification, follow the instructions in that tutorial
(http://gna.org/tls/tutorial/), or to ask Gna! to turn off https :S
Firefox automatic updates should remove the problem.  This is a bit of
a pain!!  Stupid system!  Grrrr..........

Regards,

Edward


On 29 November 2010 17:17, Sébastien Morin <sebastien.mo...@unibas.ch> wrote:
> Hi,
>
> Thank you Edward for the link to the tutorial.
>
> Of course, it would be better if the problem was fixed, since this, as you
> said, may scare people off Gna! website...
>
> Cheers,
>
>
> Séb  :)
>
>
> On 10-11-29 10:48 AM, Edward d'Auvergne wrote:
>>
>> Hi,
>>
>> I've had a look at this and it seems to be an easily solvable issue.
>> It has been reported to Gna! at:
>>
>> https://gna.org/support/?1997
>>
>> The problem is that the CAcert.org root certificate is not included
>> with the browser, or it's probably out of date and needs updating.
>> There are instructions at:
>>
>> http://gna.org/tls/tutorial/
>>
>> The simplest solution though is to accept the site as being secure.
>> This is only for encrypted transfer of webpages and files from Gna!,
>> so assuming the site is not secure, then it would be the same security
>> as unencrypted webpages.  It's not really an issue, but it does scare
>> people off :S
>>
>> Cheers,
>>
>> Edward
>>
>>
>>
>> On 24 November 2010 16:01, Sébastien Morin<sebastien.mo...@unibas.ch>
>>  wrote:
>>>
>>> Hi,
>>>
>>> Thanks to Fred Damberger, I just recalled observing a security-related
>>> issue
>>> with the Gna website.
>>>
>>> Here is the message Firefox gives when trying to login on Gna:
>>>
>>> ========
>>> This Connection is Untrusted
>>>
>>> You have asked Firefox to connect
>>> securely to gna.org, but we can't confirm that your connection is secure.
>>>
>>> Normally, when you try to connect securely,
>>> sites will present trusted identification to prove that you are
>>> going to the right place. However, this site's identity can't be
>>> verified.
>>>
>>> What Should I Do?
>>>
>>> If you usually connect to
>>> this site without problems, this error could mean that someone is
>>> trying to impersonate the site, and you shouldn't continue.
>>>
>>> Technical Details
>>>
>>> gna.org uses an invalid security certificate.
>>>
>>> The certificate is not trusted because the issuer certificate is unknown.
>>>
>>> (Error code: sec_error_unknown_issuer)
>>>
>>> I Understand the Risks
>>>
>>> If you understand what's going on, you
>>> can tell Firefox to start trusting this site's identification.
>>> Even if you trust the site, this error could mean that someone is
>>> tampering with your connection.
>>>
>>> Don't add an exception unless
>>> you know there's a good reason why this site doesn't use trusted
>>> identification.
>>> ========
>>>
>>> Is this important ?
>>> Should this be fixed by the Gna people ?
>>>
>>> Cheers,
>>>
>>>
>>> Séb  :)
>>>
>>> --
>>> Sébastien Morin, Ph.D.
>>> Postdoctoral fellow
>>> S. Grzesiek NMR Laboratory
>>> Biozentrum, Universität Basel
>>> Basel, Switzerland
>>>
>>>
>>> _______________________________________________
>>> relax (http://nmr-relax.com)
>>>
>>> This is the relax-users mailing list
>>> relax-users@gna.org
>>>
>>> To unsubscribe from this list, get a password
>>> reminder, or change your subscription options,
>>> visit the list information page at
>>> https://mail.gna.org/listinfo/relax-users
>>>
>
> --
> Sébastien Morin, Ph.D.
> Postdoctoral fellow
> S. Grzesiek NMR Laboratory
> Biozentrum, Universität Basel
> Basel, Switzerland
>
>

_______________________________________________
relax (http://nmr-relax.com)

This is the relax-users mailing list
relax-users@gna.org

To unsubscribe from this list, get a password
reminder, or change your subscription options,
visit the list information page at
https://mail.gna.org/listinfo/relax-users

Reply via email to