Re: "Certificate failure"

From: Alan J. McFarlane (alanjmcf@yahoo.com)
Date: 09/17/02 

From: "Alan J. McFarlane" <alanjmcf@yahoo.com>
Date: Tue, 17 Sep 2002 12:20:33 +0100

Ian

"Ian Wade" <ian.wade@netro.co.uk> wrote in message
news:5ZhjHGJlqCh9EwjV@netro.co.uk...
> While I was connected in an https session to a bank just now, I decided
> to check the SSL status (by clicking on the padlock in the IE browser).
> IE told me that "This certificate has failed to verify for all of its
> intended purposes". What should I read into this?
>

See http://support.microsoft.com/default.aspx?scid=kb;en-us;Q233479 it has
title:
  Error Message: This Certificate Has Failed to Verify for All of Its
Intended Purposes
and its text contains:
...
  Cause
  This issue can occur if Internet Explorer interprets a specific object ID
in the contents of some Server Gated Cryptography (SGC) certificates.
  Resolution
  This issue effects only the user interface; ...

A SGC Certficate is one that allows 128-bit security to be used even when
the user's browser is not allowed to generally use 128-bit, that is it is a
"Export" version. MSIE (well Schannel I suppose) know to use 128-bit
security but its display doesn't fully understand the certificate's content.

Alan

Relevant Pages

  • [NT] Flaw in Outlook 2002s Way of Handling V1 Exchange Server Security Certificates Leads To Informa
    ... Beyond Security would like to welcome Tiscali World Online ... Encryption is used to prevent parties other ... Outlook uses public key certificates to facilitate the exchange of the ... there are other certificate options including V1 Exchange Server Security ...
    (Securiteam)
  • Re: Embedding Simple MFC GUI app into website
    ... particular technology is "evil" goes beyond common sense and increases ... his denouncement of ActiveX and Java (and Flash, ... ActiveX, in particular, is an antipattern for security. ... Since you must obtain a certificate for code signing from the trusted ...
    (microsoft.public.vc.mfc)
  • Re: Auto Enrollment not working for one DC
    ... Windows Server 2003 SP1 introduces enhanced default security settings for the DCOM protocol. ... Windows Server 2003 Certificate Services provides enrollment and administration services by using the DCOM protocol. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Auto Enrollment not working for one DC
    ... I was already aware of the post SP1 problem with the CERTSVC_DCOM_ACCESS ... Certificate Services: Effects of security enhancements to the DCOM protocol ...
    (microsoft.public.windows.server.active_directory)
  • Re: self-signing certificate
    ... saw that my self-signed certificate was under the ... Now warnings at all when opening with medium security set. ... And, if correct, why the warning? ...
    (microsoft.public.access.security)
Loading