Tag Info

New answers tagged

0

I wouldn't start randomly trusting individual certificates for websites. That just sounds like a bad idea. Without the chain of trust to confirm the provenance of the certificates it just seems like too much of a risk. One option is to visit DigiCert's site and download the specific DigiCert certificates that are missing and install them. You appear to ...


0

I ran into a similar issue just the other day, only in Safari. An HTTPS site kept popping up a list of certificates to click on and then continue or cancel, it never went through. What I found is that the certificate in the keychain was damaged, deleting those certs in the keychain utility fixed the issue. BEFORE YOU DO THAT Backup your keychain, just in ...


1

Why would you want to? If you're worried about the integrity of the downloads, you should know that MacPorts will also download and verify a detached RSA signature for each binary archive it downloads – the public key used for verification comes to your local machine using a tamper-resistant path (either an installer .pkg signed with a DeveloperID ...


0

This helped me: (chrome, OsX) Open Keychain.app Search "digicert" in the top-right corner of Keychain.app Select all digicert certificates and remove them with right click and context menu (http://screencast.com/t/2T4f1XQa0Xu) Go here http://digicert.com/digicert-root-certificates.htm Find on page and Download DigiCert High Assurance EV Root CA ...


1

If a website is serving some content over HTTPS and some over HTTP then you shouldn't trust it. It's that simple. It doesn't matter what certificate it is using for the secure parts. If part of the content is being loaded over an insecure connection then you don't know if it has been interfered with, and you don't know if it is interfering with the securely ...


2

The obvious solution would be to modify the source URLs for the packages. The source URLs for a lot of packages appears to be /opt/local/var/macports/sources/rsync.macports.org/release/tarballs/ports/_resources/port1.0/fetch/mirror_sites.tcl. Having said that, I'm not sure whether it is a good idea to modify that file. If you do a selfupdate your modified ...


1

Should I worry about this? You should always distrust SSL connections that are using expired certificates. This could indicate a simple oversight on the part of the website operator or it could indicate a malicious attempt to intercept encrypted communications between the website and your browser. Heed your browser's warnings and don't load the page ...



Top 50 recent answers are included