{"id":739,"date":"2008-03-08T10:12:49","date_gmt":"2008-03-08T15:12:49","guid":{"rendered":"http:\/\/www.bytebot.net\/blog\/archives\/2008\/03\/08\/olpc-browser-throwing-sec_error_unknown_issuer"},"modified":"2008-03-08T10:12:53","modified_gmt":"2008-03-08T15:12:53","slug":"olpc-browser-throwing-sec_error_unknown_issuer","status":"publish","type":"post","link":"http:\/\/www.bytebot.net\/blog\/archives\/2008\/03\/08\/olpc-browser-throwing-sec_error_unknown_issuer","title":{"rendered":"OLPC browser throwing sec_error_unknown_issuer"},"content":{"rendered":"

I had the opportunity to visit a school today. Not quite a school you’ll expect to roll-out a deployment of OLPCs (its a top-notch boarding school, with yearly fees that cost as much as completing a 4-year university degree), but a school in Victoria, nonetheless.<\/p>\n

Microsoft products are entrenched in the Victorian school system. It so happens that Microsoft ISA Server 2006 is used to power mail for the students. Trying to access mail via the browser, proved to be impossible with the OLPC.<\/p>\n

\"OLPC<\/a>
Secure Connection Failed: The certificate is not trusted because the issuer certificate is unknown<\/i><\/div>\n

The error code received: sec_error_unknown_issuer<\/tt>. So I thought I’d try out giving an exception.<\/p>\n

\"OLPC<\/a>
Getting an exception? You need to find advanced encryption settings<\/i><\/div>\n

Exceptions are impossible to get, seeing that there’s no way to get to the advanced encryption settings location. After coming home, I decided to check up on this (which involves hopping on to the developers IRC channel). Turns out the ticket is #5534: Browser cannot connect to sites with non-standard Certificate Authorities<\/a>.<\/p>\n

I added to the ticket, mainly because the MS ISA Server 2006 actually had a valid certificate, signed by VeriSign. It works fine in Firefox, but just not on the OLPC. Apparently, there’s an FAQ about this too: How to ignore SSL warning about invalid security certificate?<\/a> However, the idea of installing Opera<\/a>, just doesn’t bode well with me – the browser itself, must work.<\/p>\n

Time to get hacking…<\/p>\n

Technorati Tags: olpc<\/a>, olpc xo<\/a>, microsoft isa server<\/a>, ssl<\/a>, sec_error_unknown_issuer<\/a>, certificate<\/a>, encryption<\/a>, gecko<\/a><\/p>\n

Share this:<\/h3>