Thursday, December 24, 2015

Route 1: Checking Certificate Trust.

Navigate to the introduction lesson 1.1 slide 1 to check the certificate.

Firefox tells me the certificate is already installed.  It has always told me this, despite having never installed a certificate.  Perhaps I already trusted the right certificate or maybe the site code is missing something.

As you can tell, I don't really trust computers.  The site doesn't explain which certificate it installed, so I can't verify anything.  I figured the best way to locate the specific certificate was by digging through the site code.  While viewing the same slide:
  • Open Firefox's Developer Console Debugger
  • Search for '!cert'
  • E0M1S1_0000_edgeActions.js contains the line
window.open("https://certs.godaddy.com/repository/gdig2.crt", "_blank");
  • Assume this is the certificate.
  • Check by deleting all Go Daddy certs from Firefox.
    • Select Options >> Advanced >> Certificates >> View Certificates
    • Navigate through the 5 tabs looking for certificates from GoDaddy.
    • Highlight each and then delete all.
  • Refresh the page
  • Click the Cert link.....different prompt!
  • Select 'This certificate can identify websites.' 
If you want to double check your cert fingerprints, see below.

Name:  Go Daddy Root Certificate Authority -G2
SHA-256 Fingerprint:       45:14:0B:32:47:EB:9C:C8:C5:B4:F0:D7:B5:30:91:F7:32:92:08:9E:6E:5A:63:E2:74:9D:D3:AC:A9:19:8E:DA

Name:  Go Daddy Secure Certificate Authority - G2
SHA-256 Fingerprint:

97:3A:41:27:6F:FD:01:E0:27:A2:AA:D4:9E:34:C3:78:46:D3:E9:76:FF:6A:62:0B:67:12:E3:38:32:04:1A:A6

Download location:
   https://certs.godaddy.com/repository/gdig2.crt


Unfortunately, I still get the same error when loading a VM.  It looks like the certificate isn't the problem.

-dh

No comments:

Post a Comment