SSL Security Error: Difference between revisions
m (Security alert moved to Security Error: Domain Name Mismatch or Server Certificate Expired) |
(mention wrong system date, don't jump right to "nah that big scary warning can be ignored") |
||
| Line 1: | Line 1: | ||
''This article applies to Firefox, Thunderbird, Mozilla Suite and SeaMonkey.'' | ''This article applies to Firefox, Thunderbird, Mozilla Suite and SeaMonkey.'' | ||
"Security Error: Domain Name Mismatch" occurs if you make a secure connection to a server whose domain does not match the domain name in the certificate it uses. This is to inform you that the site you are trying to connect to may not be the site you wanted. It may also occur when a site changes their domain name but doesn't buy a certificate for the new domain. | |||
In both cases, | "Security Error: Server Certificate Expired" occurs if the site's certificate expiry dateis later than your system date. This may be caused by your system having the incorrect time, or by the certificate genuinely being expired. | ||
In both cases, you should make a judgment as to whether you still want to trust the server for what you want to use it for. For example, it may not be a good idea to send your credit card information to a site with either of these problems, but it may be acceptable for posting on a forum. If you trust the server, you can can get rid of the alert by installing the [https://addons.mozilla.org/firefox/2131/ Remember Mismatched Domains extension]. It adds a "Don’t warn me again about this certificate for this domain" checkbox to the Domain Name Mismatch and Server Certificate Expired warning windows. | |||
[[Category:Issues (Firefox)]] | [[Category:Issues (Firefox)]] | ||
Revision as of 04:39, 16 December 2006
This article applies to Firefox, Thunderbird, Mozilla Suite and SeaMonkey.
"Security Error: Domain Name Mismatch" occurs if you make a secure connection to a server whose domain does not match the domain name in the certificate it uses. This is to inform you that the site you are trying to connect to may not be the site you wanted. It may also occur when a site changes their domain name but doesn't buy a certificate for the new domain.
"Security Error: Server Certificate Expired" occurs if the site's certificate expiry dateis later than your system date. This may be caused by your system having the incorrect time, or by the certificate genuinely being expired.
In both cases, you should make a judgment as to whether you still want to trust the server for what you want to use it for. For example, it may not be a good idea to send your credit card information to a site with either of these problems, but it may be acceptable for posting on a forum. If you trust the server, you can can get rid of the alert by installing the Remember Mismatched Domains extension. It adds a "Don’t warn me again about this certificate for this domain" checkbox to the Domain Name Mismatch and Server Certificate Expired warning windows.
