SSL cert Error (add permanently)

Here you can post about the issues related to modifications performed manually (not through the kiosk wizard). Example: swapped kernel, added 3rd party modules or files.
Please describe in detail what has been changed and hopefully other kiosk user will be able to help.
Porteus team wont resolve bugs posted in this category as we support only modifications made by the kiosk wizard.
Forum rules
Porteus Kiosk section of the forum is unmaintained now. Its kept in a 'read only' mode for archival purposes.
Please use the kiosk contact page for directing your queries: https://porteus-kiosk.org/contact.html
astrong
White ninja
White ninja
Posts: 4
Joined: 26 Mar 2015, 10:58
Distribution: porteus
Location: munich

SSL cert Error (add permanently)

Post#1 by astrong » 29 Sep 2015, 07:10

hey guys,

we use porteus kiosk for our datacenter.

firefox broswer loads our https:// login page.
Since ~24hours FF reports "untrust connection" but realy nothing changed!? :wall:

Image

sec_error_unknown_issuer

The biggest problem in this case: firefox report this after every 60s timeout/reset... thats awful for our customer.

Bios Date and Systemdate looks fine.

Maybe anyone knows that reason for that suddenly certificate error?...

Porteus kiosk burned and booted on CD.
Dell PowerEdge 1950

thanks a lot!

User avatar
fanthom
Moderator Team
Moderator Team
Posts: 5666
Joined: 28 Dec 2010, 02:42
Distribution: Porteus Kiosk
Location: Poland
Contact:

Re: SSL cert Error (add permanently)

Post#2 by fanthom » 29 Sep 2015, 08:59

Hi astrong,

As you know the kiosk is read only so nothing could change on the client side. Maybe your customer firewall blocked domains needed to by the Firefox to be accessible to verify the issuer of the certificate?

Here are other possible reasons:
https://support.mozilla.org/en-US/kb/co ... or-message
http://kb.mozillazine.org/SSL_Security_Error

If you want to add permanent exception to the ISO then:
- run kiosk with private mode disabled
- accept the certificate
- login to kiosk through ssh and copy $profile/cert8.db and cert_override.txt
- remaster the ISO with these files included

Should work.
Please add [Solved] to your thread title if the solution was found.

astrong
White ninja
White ninja
Posts: 4
Joined: 26 Mar 2015, 10:58
Distribution: porteus
Location: munich

Re: SSL cert Error (add permanently)

Post#3 by astrong » 01 Oct 2015, 11:54

thanks a lot!

it works fine again.

Locked