General :
K-Meleon Web Browser Forum
General discussion about K-Meleon
strange problem
Posted by:
Marcus
Date: December 21, 2010 05:32PM
I can't go to one page by https. KM popup says: untrusted certificat.
This page have trusted, valid certificat and some time ago I have been access with autologin/pass.
I delete all about this site in privacy/security: site address, login, pass, restart
K-meleon and zero efects.
WTH!? Other browsers says that is all right on this page.
How to clear and add or update certificat for this page? Other solutions?
M.
Re: strange problem
Date: December 21, 2010 06:14PM
If this happens with version 1.6, I was having the same problem when I was testing it 2 days ago. No answers :-?
Weird problem.
Re: strange problem
Posted by:
Marcus
Date: December 21, 2010 07:51PM
KM 1.54 + some macros: Defaultchk, Enforcepass, Getfilesize, Kmsms, SearchBar...
M.
Re: strange problem
Date: December 21, 2010 08:27PM
restore from backup files: cert8.db and key3.db no repair this.
M.
Re: strange problem
Date: December 21, 2010 09:35PM
Uncheck all these user macros (F2->Macros), to see if it's ok, and check then one by one to find which gives the problem ...
A+
Mozilla/5.0 (x11; U; Linux x86_64; fr-FR; rv:38.0) Gecko/20100101 Ubuntu/12.04 K-Meleon/76.0
Web:
http://jujuland.pagesperso-orange.fr/
Mail : alain [dot] aupeix [at] wanadoo [dot] fr
Ubuntu 12.04 - Gramps 3.4.9 - Harbour 3.2.0 - Hwgui 2.20-3 - K-Meleon 76.0 rc
Edited 1 time(s). Last edit at 12/21/2010 09:36PM by JujuLand.
Re: strange problem
Date: December 22, 2010 01:21PM
All user-macros off, problem still exist.
Where is "list trusted certificates"? Probably is corrupted. Problem refer to one address!
K-meleons popup: "...can't establish cipher connection, becouse this site isn't on list trusted certificates".
KM-S207 do it OK. Other browsers too. Only my KM 1.5.4 is corrupted (now?). How to repair it?
M.
Re: strange problem
Date: December 22, 2010 01:45PM
No idea if that helps anything, probably not, but guess the prefs are those:
F2 > Privacy > Encryption > Encrypted Transmission
And there's lots of stuff in about:config (filter 'ssl')
Perhaps do a forum search on 'certificates', guess there were some detailed discussions awhile ago...
Edited 1 time(s). Last edit at 12/22/2010 01:46PM by siria.
Re: strange problem
Date: December 22, 2010 03:26PM
Same problem here, i tried to understand too... Here I'm going to use openid.org : can't remember well but the guy owning it disagreed the openid.net foundation and decided to run alone with its own openid in a commercial way...but openid.net blocked his certificate, check wiki for more about.
So! here we are! an invalid/untrusted certificate!
Test with KM1.6 beta 2 :
1 - Action : opening KM with www.openid.org
1 - Result : on screen now i have the message 'Invalid certificate'.
2 - Action : I click on 'add an exception'
2 - Result : openid.org on screen => ok
3 - Action : KM still opened, i check files cert8.db and cert_override.txt
3 - Result : no trace of a kind of autorization with openid.org
4 - Action : closing KM
5 - Action : re-opening KM
6 - Action : Repeating Action 1
6 - Result = result 1! Gosh!!! I htill have the message 'Invalid certificate'!!!
Now same test with Firefox 3.6.13 :
1 - Action : opening Firefox with www.openid.org
1 - Result : on screen now i have the message 'Invalid certificate'.
2 - Action : I click on 'i take the risk' or 'add an exception'
2 - Result : openid.org on screen => ok
3 - Action : Firefox still opened, i check files cert8.db and cert_override.txt
3 - Result : Good! Openid.org is registered in these two files!
4 - Action : closing Firefox
5 - Action : re-opening Firefox
6 - Action : Repeating Action 1
6 - Result = result 2! openid.org is on screen => ok
cert8.db and cert_override.txt are in the root of the KM profile(Application Data tree). It seems KM writes nothing more inthere...
Edited 5 time(s). Last edit at 12/22/2010 03:37PM by jemmi.
Re: strange problem
Date: December 22, 2010 05:19PM
Thanks Siria, but problem is in other, unknown place...
[about:config]
security.ssl3.dhe_rsa_aes_256_sha = true
failure-site crypt is: "RSA, DHE-RSA-AES256-SHA (256/256)"
this isn't protokol problem.
Mystery "list" (with trusted / untrusted - so say K-meleons popup).
(not option in 1.5.4 - popup has one button "OK", - thats all).
I can accept message only.
I suppose that problem is in files nss*.dll (nssckbi.dll?).
Is it possible check/update file(s) from Mozilla for KM 1.5.4?
M.
Edited 1 time(s). Last edit at 12/24/2010 03:16PM by Marcus.