PDA

View Full Version : Certificate Error : Navigation Blocked (support site)


Togra_blah
06-23-2008, 02:17 AM
<p>When navigating in some areas of the Support Site (for example, <a rel="nofollow" href="https://help.station.sony.com/cgi-bin/soe.cfg/php/enduser/myovr.php" target="_blank">https://help.station.sony.com/cgi-b...duser/myovr.php</a>) Windows XP with Internet Explorer 7 (all updates are installed of course), i recieve a Security Warning as follows (having trouble getting it to display/accept this.... thus the edits.... ended up having to remove icons and copy text only, typing some out instead of copy/paste, due to some format issue that was not removable with the Remove Formatting button):</p><h1>There is a problem with this website's security certificate.</h1><p>The security certificate presented by this website was issued for a different website's address. Security certificate problems may indicate an attempt to fool you or intercept any data you send to the server. </p><p>We recommend that you close this webpage and do not continue to this website.</p><p><with a green Checkmark Windows Security Center Shield Icon, clickable> Click Here to close  this webpage.</p><p><with a red X Windows Security Center Shield Icon, also clickable> Continue to this Website (Not Reccomended).</p><p><With an openable xtra section> More Information</p><p><The xtra More Information Section> </p><div><li>If you arrived at this page by clicking a link, check the website address in the address bar to be sure that it is the address you were expecting. </li><li>When going to a website with an address such as <a rel="nofollow" href="https://example.com," target="_blank">https://example.com,</a> try adding the 'www' to the address, <a rel="nofollow" href="https://www.example.com." target="_blank">https://www.example.com.</a> </li><li>If you choose to ignore this error and continue, do not enter private information into the website. <p>For more information, see "Certificate Errors" in Internet Explorer Help.</p></li></div><p>From Certificate Errors in IE Help (some formatting issues, i removed icons and manually formatted some sections, but text remains unaltered): </p><p>About certificate errors</p><p>A certificate is an electronic document that can help identify a website's owner and can help you make decisions about trusting the site with personal or financial information. Certificates are issued by certification authorities whose responsibility it is to confirm the identity of the website owner or organization.</p><p>Why do certificate errors occur?</p><p>Certificate errors occur when there is a problem with a certificate or the server's use of the certificate. Internet Explorer can help keep your information more secure by warning you about certificate errors.</p><p>How do I know if there is a certificate error?</p><p>Usually, a blocking page will appear that will warn you about the problem with the certificate. If you choose to ignore the error and continue, the Address bar will turn red and a notification will appear in the Security Status bar (next to the Address bar).</p><p>I'm getting errors on websites I always visit, what should I do?</p><p>If you encounter a certificate errors at a website you have visited before without errors, it's possible the website is not configured correctly. Try retyping the address you are using. For example, if you are typing the address as <a rel="nofollow" href="https://example.com," target="_blank">https://example.com,</a> try changing it to <a rel="nofollow" href="https://www.example.com." target="_blank">https://www.example.com.</a></p><p>It is also possible that the website's certificate has expired and the owner or operator needs to renew the certificate in order to continue using it.</p><p>Is it ever safe to ignore a certificate warning and continue to a website?</p><p>A website's certificate provides identification of the web server. If the certificate has an error, it might indicate that your connection has been intercepted or that the web server is misrepresenting its identity.</p><p>What happens when I continue to a website that has a certificate warning?</p><p>If you ignore the warning page, and continue to a website that has presented a certificate containing errors, Internet Explorer will remember the certificate. You will not get error for that certificate until Internet Explorer is restarted.</p><p>What do the different certificate errors mean?</p><p>The following table contains a list of common certificate errors and information about what they mean.</p><p><had to manually copy/paste individual sections - formatting issue again... also bolded/increased font size for one section></p><p>This website's security certificate has been revoked</p><p>Do not trust this website. This error message often indicates that the security certificate was obtained or used fraudulently by the website. The encryption key that is specified in the certificate might have been compromised or the user listed in a certificate does not have authority to use it (for example, the company was sold). The certification authority that issued the certificate keeps a list of revoked certificates and that list is checked by Internet Explorer.</p><p><b>This website's address does not match the address in the security certificate</b></p><p><b>This error indicates the website is using a digital certificate that was issued to a different web address. This error can also occur if a company owns several websites and uses a certificate that was issued for one web address for another site <span style="font-size: small;">(for example, for a different department or division).</span></b></p><p>This website's security certificate is out of date</p><p>This error occurs when the current date is either before or after the time period during which the certificate is valid. Websites must renew their certificates with a certification authority to stay current. Outdated certificates can be a security risk. After a certificate expires, the Certification Authority that issued the certificate is no longer responsible for ensuring that the certificate is not misused.</p><p>This website's security certificate is not from a trusted source</p><p>This error occurs when the certificate has been issued by a certification authority that is not recognized by Internet Explorer. It is unlikely that this error will occur on a legitimate business or banking site. Phishing sites often attempt to use fake certificates that will trigger this error.</p><p>Internet Explorer has found a problem with this website's security certificate</p><p>This error occurs when Internet Explorer finds a problem with a security certificate that does not fit any other error conditions. The error can potentially occur because a certificate has been corrupted, tampered with, is written in an unknown format, or is unreadable. You should not trust the identity of the site if the certificate has this error.</p><p>Related Topics</p><p>I'm not really keen on Firefox, i use IE for better or for worse.</p><p>What's up with this?</p>

TSR-TrevorG
06-23-2008, 04:04 PM
Did you accept the certificate?

Togra_blah
06-23-2008, 07:36 PM
<p>That's not a listed option - the page has just 2 clickable selections - the Green Checkmarked (suggested) option of Closing the Webpage (clicking which exits IE), and the Red X (not reccomended) option of Continueing to the the Website (in which case the address bar gains a Red Backround).What i mean is if i try to go to the url i listed, it takes me to a page with only that Certificate Error stuff displayed - navigation to the actual url is not possible w/o clicking the continue to the website (not reccomended) option.At this time, i tend to doubt there is an actual security issue, but this whole reaction from IE is certainly disconcerting - it has done this for as long as i can remember...... once or twice i've had to continue to the site despite it..... but IE certainly has a fit about it....Also, my computer is, to the extent of my moderate knowledge, clean of any malicious software - at this time i only have Mcafee Security stuff installed, but it covers the bases - would use Spybot S&D but Mcafee doesn't play very nicely with it, unfortunately.I'll see if i can turn the Certificate Error page into a Picture and put up a link to it in picture form here.... i'll edit that in shortly, after i upload it to photobucket and such.</p><p>Here u go:</p><p><img src="http://i123.photobucket.com/albums/o305/Togra_blah/Desktop_Screenshot.jpg" border="0" alt="" width="1440" height="900" /></p><p>And i think i found why it may do this for me, and potentially not others.....</p><p><img src="http://i123.photobucket.com/albums/o305/Togra_blah/IEAdvancedSettings-1.jpg" alt="" width="419" height="525" border="0" /></p><p>Also, that's an excellant idea DanielH heh i hadn't thought of that.</p><p>I'll add it to Trusted Sites and that should get everything squared away.</p><p>Thanks for your help, i appreciate it. <img src="/eq2/images/smilies/3b63d1616c5dfcf29f8a7a031aaa7cad.gif" border="0" alt="SMILEY<img src=" width="15" height="15" /></p><p>Sorry about the picture edits and re-edits lol i don't usually fiddle with that very much. <img src="/smilies/3b63d1616c5dfcf29f8a7a031aaa7cad.gif" border="0" alt="SMILEY" /></p>

TSR-DanielH
06-23-2008, 07:46 PM
If you go to 'internet options' and select the 'security' tab, then you should be able to add our website to the list of trusted sites.  That should prevent all the annoying pop up confirmation messeges. 

Togra_blah
06-23-2008, 08:35 PM
<p>Alas, adding to trusted sites did not fix it....... the error remains.....</p><p><img src="http://i123.photobucket.com/albums/o305/Togra_blah/StillSameError.jpg" alt="" width="1440" height="900" border="0" /></p><p> Thoughts? Am i going to have to disable that Setting in Advanced?</p>

TSR-TrevorG
06-23-2008, 08:49 PM
You can also just click, "Continue to this website" and it should be fine.

Brook
06-24-2008, 12:57 PM
This may sound kinda out there but check your systems date setting and make sure its set right.

Togra_blah
06-24-2008, 02:47 PM
An interesting thought Brook, but i'm 100% sure the Windows Date and Time is correct - i have it set to sync with time.windows.com and have the appropriate port forwarded on Firewall and Router. The BIOS System Clock i'm somewhat less familiar with.... but i tend to suspect it is correct as well. <img src="/smilies/3b63d1616c5dfcf29f8a7a031aaa7cad.gif" border="0" alt="SMILEY" /> The error msg is displayed due to 2 things - firstly an Advanced Setting in IE that i have manually enabled (see the 2nd picture in my post prior to DanielH's). It "Warns about certificate address mismatch". And Secondly, i can only presume, IE is convinced that the Certificate Address does indeed Mismatch for the Support Site. From the sounds of it, there is NO actual security-related issue here, just either: A. IE incorrectly believes the Certificate Address to be Mismatching. or B. Some mistake was made in regards to the Digital Certificate for the Support Site and, while it IS secure, perhaps SOE, owning several websites, used a certificate that was issued for one web address for another site (for instance, they used the same certificate for different departments/divisions). I wouldn't know which scenerio is correct, but i do believe one or the other accurately describes the situation. Anyway, since i'm now confident there is NO actual security issue related to any of this, i feel safe enough to just ignore the error msg. It'd be nice if this was resolved, but eh, not time-critical or anything, just if the opportunity presented itself. <img src="/smilies/3b63d1616c5dfcf29f8a7a031aaa7cad.gif" border="0" alt="SMILEY" />

Brook
06-24-2008, 03:02 PM
<p>Yea was kinda far fetched, but I had some similar issues before after a hard crash and found that to be the cause, strange things happen when the clock isn't right.</p><p>Best of luck finding a solution.</p>

Teigetje
09-08-2008, 05:48 AM
<p>I just ran into the same error. I suspect Sony made some error in applying the certificate,</p><p>although I did get a security update fom Microsoft recently and would not be surprised if</p><p>this has altered my settings for IE without asking for confirmation....</p><p>Wim.</p>