Page 1 of 1

SSL cert Error (add permanently)

Posted: 29 Sep 2015, 07:10
by astrong
hey guys,

we use porteus kiosk for our datacenter.

firefox broswer loads our https:// login page.
Since ~24hours FF reports "untrust connection" but realy nothing changed!? :wall:

Image

sec_error_unknown_issuer

The biggest problem in this case: firefox report this after every 60s timeout/reset... thats awful for our customer.

Bios Date and Systemdate looks fine.

Maybe anyone knows that reason for that suddenly certificate error?...

Porteus kiosk burned and booted on CD.
Dell PowerEdge 1950

thanks a lot!

Re: SSL cert Error (add permanently)

Posted: 29 Sep 2015, 08:59
by fanthom
Hi astrong,

As you know the kiosk is read only so nothing could change on the client side. Maybe your customer firewall blocked domains needed to by the Firefox to be accessible to verify the issuer of the certificate?

Here are other possible reasons:
https://support.mozilla.org/en-US/kb/co ... or-message
http://kb.mozillazine.org/SSL_Security_Error

If you want to add permanent exception to the ISO then:
- run kiosk with private mode disabled
- accept the certificate
- login to kiosk through ssh and copy $profile/cert8.db and cert_override.txt
- remaster the ISO with these files included

Should work.

Re: SSL cert Error (add permanently)

Posted: 01 Oct 2015, 11:54
by astrong
thanks a lot!

it works fine again.