Re: Server Certificates (Bug?)

• Subject: Re: Server Certificates (Bug?)
• From: Darin Adler <email@hidden>
• Date: Thu, 28 Apr 2005 13:16:31 -0700
• Delivered-to: email@hidden
• Delivered-to: email@hidden

On Apr 28, 2005, at 7:57 AM, Jürgen Schweizer wrote:

I am having trouble loading sites that present a certificate.

Which sites? Is this all sites, or just sites that have a specific certificate?

Even if the certificate is in my keychain and the Trust Settings are "Always Trust" WebKit will still fail to load (responding with "bad server certificate").

The site's certificate doesn't go into your keychain. The root certificate of the chain needs to be in the X509Anchors keychain, however, for it to be trusted. Just setting "Always Trust" on the certificate is [currently] not enough to have Safari trust it, which is a known issue.

If *every* site that uses certificates is failing, one possibility is that your /System/Library/Keychains/X509Anchors keychain file is missing. You may want to run Keychain First Aid (under the application menu in Keychain Access) to verify that your configuration is OK; it will tell you if there is any problem with X509Anchors.

Are you getting a sheet that says, "Safari can't verify the identity of <site>"? If so, are you clicking Continue? Or does an error page appear immediately?

Is this a bug?

That is always a possibility, but we would need a specific URL to reproduce this.

    -- Darin

_______________________________________________
Do not post admin requests to the list. They will be ignored.
Webkitsdk-dev mailing list      (email@hidden)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/webkitsdk-dev/email@hidden

• Follow-Ups:
  • Re: Server Certificates (Bug?)
    • From: Jürgen Schweizer <email@hidden>

• Prev by Date: Server Certificates (Bug?)
• Next by Date: Re: Server Certificates (Bug?)
• Previous by thread: Server Certificates (Bug?)
• Next by thread: Re: Server Certificates (Bug?)
• Index(es):
  • Date
  • Thread