enabling Https

meshkin2 · #1 3rd February 2010, 09:16 AM

Hello;
I installed fedora12 newly!
but Https in my fedora is disable and I can't connect to secure websites like bank or online shopping checkouts, So I can't open gmail.com or mozilla addones and other programs that need Https!!!

How I can solve this serious problem???

Please Help me! I very need to Gmail and etc!!!!

SlowJet · #2 3rd February 2010, 09:37 AM

$ rpm -qa openssl\* openssh\*
openssh-5.3p1-18.fc12.i686
openssh-server-5.3p1-18.fc12.i686
openssl-perl-1.0.0-0.16.beta4.fc12.i686
openssh-clients-5.3p1-18.fc12.i686
openssl-1.0.0-0.16.beta4.fc12.i686
openssh-askpass-5.3p1-18.fc12.i686

These s/b installed by the default Desktop.
You either have to create a user logon for the site or accept the Certificate from from the site the first use from a computer O/S.

SJ

meshkin2 · #3 3rd February 2010, 10:02 AM

I run your command and it worked! thanks!
but some of sites and programs(for example : https://ebanking.bankmellat.ir/ebanking/ and mozilla addones and thunderbird ) not work yet!
what I must do?
Please help!

SlowJet · #4 3rd February 2010, 10:11 AM

Well, you need to acept the Certificate Authuration but

the one show is expired - accept at your own risk.

The other usual caution is a self authorized certificate which means he is who he says he is because he said so, and that means nothing but makes the Cert work.

SJ

meshkin2 · #5 3rd February 2010, 10:49 AM

I Install Fedora 12 newly!!! why it expired???
can I repair it?

SlowJet · #6 3rd February 2010, 11:18 AM

It's not you, it is them. It is their Certificate.

SJ

meshkin2 · #7 3rd February 2010, 03:40 PM

Thank you very much.

bodhi.zazen · #8 3rd February 2010, 04:27 PM

Your problem is unusual in that a default installation , your client, firefox, should accept certificates by default.

I see it is working now, but, as a side note, I would NOT do any on line banking with an organization with an expired ssl certificate.

Self signed certs and expired certs may be acceptable for personal use if one does not wish the expense of a commercial certificate for home use, but, IMO, unacceptable for commercial use.

You should contact your bank and have them update their ssl certificate.

SlowJet · #9 3rd February 2010, 08:12 PM

Quote:

Originally Posted by bodhi.zazen

Your problem is unusual in that a default installation , your client, firefox, should accept certificates by default.

I see it is working now, but, as a side note, I would NOT do any on line banking with an organization with an expired ssl certificate.

Self signed certs and expired certs may be acceptable for personal use if one does not wish the expense of a commercial certificate for home use, but, IMO, unacceptable for commercial use.

You should contact your bank and have them update their ssl certificate.

The self signed is ok to use for internal intranets.

Using an expired certificate has many side affects. It can mean the machine is not being properly maintained or that a new owner has taken possession and one is purposely masquerading as the the old owner. i.e. A stolen system, illegal activity, crackers, fraud, ...

Supporting expired certificates makes the whole internet less safe.

SJ

thunderkyss · #10 23rd February 2010, 01:11 AM

Hey guys, this is only kind of related. But is there any work around for a bank that doesn't support Linux? They say they'll support Mozilla or IE, on a Windows PC or a Mac.

What difference does it make to them? It's just a browser............

smr54 · #11 23rd February 2010, 03:57 AM

@thunderkyss, you should probably start a new thread for the question, and also give the name of the bank. Lastly, you should state what sort of problem you're having with it. There's a reasonable chance that someone might have had experience and can solve it.