Pages

Friday, February 1, 2013

Testing certficates on a server

Just been facing one of those problem where if you were dealing with it every day, you'd solve it in no time.
On some of my browsers across my many machines, I was able to access my works https site without any warning of being an untrusted source.
Firefox however, did not want to behave.

Apparently a browser can optionally look up the intermediate certificate from the one the server provides. Obviously this sort of automatic trust can be a bit of a security issue.

Finally found a site that did an independent test (wanted something automated and outside the network).
https://www.wormly.com
Pointed out the problem and even gave a hint on how to fix it.
Explained it to the network admin and he was able to track it down.

No comments:

Post a Comment