What's up with the "Invalid Certificate" warning?

[reefraff]

The past few days when I jump to the site (the CP, to be specific) I have been getting a message that there is a problem with the security certificate on the site...

MS XP with all the patches
Firefox with all the patches
Norton Internet Security with all the patches

No big deal, just wondering.

[MgicTwnger]

It either has something to do with the "patriot" act, or James hasn't been paying his bills.:cool:

[Captain Caveman]

Im not having problems on this site with my Norton internet Security or my Windows Xp.

But I just updated my Norton from 2005 to 2006 and with Xp update

[Atlaua]

Bob mentioned somthing similar the other day. Nothing has changed here in about 2 weeks. I can tell you that those of us in the computer industry consider Norton to be a virus, not virus protection. I got a new computer 2 weeks ago and as a computer programmer, I could not even get it on the internet at all until I uninstalled Norton Firewall. I'm a McAfee guy myself.

You say this happens when you go to UserCP? A certificate error should only come up when you hit a "secure" page. When you hit this page does it have http:// or https:// in the address bar?

[scububa]

Bob mentioned somthing similar the other day. Nothing has changed here in about 2 weeks. I can tell you that those of us in the computer industry consider Norton to be a virus, not virus protection. I got a new computer 2 weeks ago and as a computer programmer, I could not even get it on the internet at all until I uninstalled Norton Firewall. I'm a McAfee guy myself.

You say this happens when you go to UserCP? A certificate error should only come up when you hit a "secure" page. When you hit this page does it have http:// or https:// in the address bar?

Not intending to start a debate, but your comment on Norton is interesting. I am not an industry guru, but I hear and fight problems that are the exact opposite. In particular, McAfee seems to get isolated to problems involving communications interfaces. A year (or maybe two) ago, folks with Uwatec interfaces were having problems establishing links were it appeared McAfee was the problem. (Documented on that other board.)

I personally went thru hell at home with all three of my computers being crippled by viruses, agents, worms, etc... Two had McAfee and one had outdated Norton. I rebuilt all three systems leaving McAfee off and installing a common Norton pack. Things have been fine for a year now. YMMV obviously.

One thing I noticed here about two days ago. In the PM folders, I can't delete a message while looking at it and selecting the delete box option and then the delete button. If I go back to the folder and select and delete it works.

Jim

[MgicTwnger]

Just to add to the fun, I'm a systems engineer with s lot of experience in security, and I've found that both Norton (Symantec) and McAfee are fine when properly configured. I prefer Norton just because I've worked with it more.
Where I see a lot of problems is when XP's built in firewall is added to the mix. Ditto for a hardware firewall. Running two (or more) at the same time will make you say words you didn't think you knew. Especially when you run into things like an antivirus program not playing nice with a particular NIC.:hamsterwh
BTW, I know James' credentials, and if he says things are OK at his end you can bet that they are.

[Atlaua]

BTW, I know James' credentials, and if he says things are OK at his end you can bet that they are.

Ahh but I didn't. I said nothing changed on my end...there may be an issue that only shows up with the latest Norton update for example..

[crpntr133]

I got the same thing today when visting the home page. I don't run Norton.

[MgicTwnger]

Ahh but I didn't. I said nothing changed on my end...there may be an issue that only shows up with the latest Norton update for example..

I want my money back!

[reefraff]

Screen caps of the message, below. This ain't a big deal - the solution is to allow the certificate - but I thought James would like to know about it.

As to virus protection, buying either McAfee or Norton has always seemed like paying protection money to the mob - you just know there are 14,000 pubescent pustules out there scripting malware to use as a resume. In any event, both McAfee and Norton stink and, for the first time in my life, I'm looking forward to Microsoft stepping in and eating their lunch in a year or two.

I originally had McAfee on this machine, after they implemented their last big upgrade I couldn't get the machine to run and they finally told me that it was a known issue for which they had no fix in the works.

Hence, Norton: though I've been known to go commando, I won't let my computer do the same.

[Atlaua]

Reef, those messages are all to do with SSL certificates. Those only come into play when you are hitting a site via SSL. I.E. If you go to https://www.midwestdive.com you are using SSL. If you go to http://www.midwestdive.com you are useing regular HTTP.

What the messages are saying is that the certficate I'm using is self signed. That means that a third party company has not signed the certificate. I.E.. the data is encrypted but "VeriSign" or a similar company has not been paid to sign the certificate. I use a self signed cert because:

1) I don't really use SSL...all links should be unencrypted.
2) I don't need a signed certificate. If I were taking credit card or other sensitive info I would want to have a signed certificate.
3) These companies charge a lot of money to sign certifcates.

The real question is why are you hitting MWD under SSL? You say this happens when you go to the UserCP. When I click the UserCP I get an http address not an https address. When you get this message does you address bar use https? If so what link are you using? If not then somthing on your machine is querying the SSL certificate when it shouldn't be.

Either way you can just download and accept the cert and you won't see the message anymore.

James


Screen caps of the message, below. This ain't a big deal - the solution is to allow the certificate - but I thought James would like to know about it.

As to virus protection, buying either McAfee or Norton has always seemed like paying protection money to the mob - you just know there are 14,000 pubescent pustules out there scripting malware to use as a resume. In any event, both McAfee and Norton stink and, for the first time in my life, I'm looking forward to Microsoft stepping in and eating their lunch in a year or two.

I originally had McAfee on this machine, after they implemented their last big upgrade I couldn't get the machine to run and they finally told me that it was a known issue for which they had no fix in the works.

Hence, Norton: though I've been known to go commando, I won't let my computer do the same.

[reefraff]

This is my bookmark for this site:

http://www.midwestdive.com/forums/usercp.php?

When I click on this link, I normally get the warning message, although if I'm currently logged into the site or have just recently been to the site, the message seems to not appear. No biggie, just my rententive nature wondering wazzup.




Reef, those messages are all to do with SSL certificates. Those only come into play when you are hitting a site via SSL. I.E. If you go to https://www.midwestdive.com you are using SSL. If you go to http://www.midwestdive.com you are useing regular HTTP.

What the messages are saying is that the certficate I'm using is self signed. That means that a third party company has not signed the certificate. I.E.. the data is encrypted but "VeriSign" or a similar company has not been paid to sign the certificate. I use a self signed cert because:

1) I don't really use SSL...all links should be unencrypted.
2) I don't need a signed certificate. If I were taking credit card or other sensitive info I would want to have a signed certificate.
3) These companies charge a lot of money to sign certifcates.

The real question is why are you hitting MWD under SSL? You say this happens when you go to the UserCP. When I click the UserCP I get an http address not an https address. When you get this message does you address bar use https? If so what link are you using? If not then somthing on your machine is querying the SSL certificate when it shouldn't be.

Either way you can just download and accept the cert and you won't see the message anymore.

James

[Atlaua]

I think I figured it out, let me know if you still see it.

[reefraff]

Who do that voodoo like you do? Seems to be gone...

I think I figured it out, let me know if you still see it.

[reefraff]

Oops - spoke too soon. It's baaaaaaack.