Digital Certificate Problem

[DannyH]

Hi Guys

 

I am having a problem with the Digital Certificate

 

I am running Uniform Server with a Virtual Stunnel Host

 

Followed the setup posted by Ric - Stunnel securing a single virtual host http://wiki.uniformserver.com/index.php/St...l:_Single_Vhost

 

 

All is well and fantastic

 

But when I go to https:// I get this box come up

 

Choose a digital certificate

Identification

The web site you want to view request identification. Pleased choose a certificate

 

But the box is empty, any idea how I can get rid of this?

 

This happens on all IE Browsers

 

I am running Uniform Server on XP PRO

 

Many Thanks

 

DannyH

[Ric]

My preferred answer would be, use Firefox.

 

Alternatively try using localhost as the common name.

 

These pages may be of help:

 

http://wiki.uniformserver.com/index.php/Mi...hentication_SSL

 

http://wiki.uniformserver.com/index.php/Mi...ed_certificates

 

All the best

Ric

[DannyH]

Thanks for the reply Ric

 

Have found a work around

 

Many thanks for your help

[Ric]

Well that’s the first time I have seen “Choose a digital certificate”.

 

I liked the choice! None however after clicking OK I received the page I expected with these choices:

 

1) Click here to close this webpage.

2) Continue to this website (not recommended).

3) More information

 

Clicking 2 OK red browser bar indicating encryption mode. Irritating phising pop-up closed that.

 

I would be interested to see if that blank pop-up occurs when using your real common name danny.xxxxxx.net and not localhost

 

I have tested your site with Firefox 3 and Opera 9.5 as expected works fine.

 

Well I am off to do a bit of Google’ing to see if there is a solution out there.

 

Just noticed, “Have found a work around” would you like to share it.

 

All the best

Ric

[Ric]

I have taken another look and now understand the problem, its hidden in this:

 

“The website you want to view requests identification. Please chose a certificate”

 

Real problem was my lack of understanding of the real failure mode! It transpires IE is correct Stunnel is requesting a user certificate. Firefox and Opera ignores this request because no personal certificates are installed. However IE goes through the motions even if there are no personal certificates hence the blank pop up, pressing the OK key promptly ignores the request.

 

Solution is to edit file: stunnel.conf

Located in folder: \Uniform Server\udrive\home\admin\www\plugins\stunnel_424\bin

 

Comment out or delete this line: verify = level 1

 

Note 1: Information for verify :

 

level 1 - verify peer certificate if present

level 2 - verify peer certificate

level 3 - verify peer with locally installed certificate

default - no verify

 

All the best

Ric

[DannyH]

Hi Ric,

 

So sorry for not responding to you on this have been installing Joomla lately and this has taken up so much of my time transferring our website into it but well worth it!! ,

 

Thanks for all your help and will try this later.

 

As sharing the work around I found it’s not really a workaround but it will do for me as this is only going to be for private members for my site but will get rid of that annoying Box

 

All I done was install the certificate on the machines viewing the website and this box then went allowing me to view the website without the any security warnings

 

But I will have a go with your workaround later and let you know how I get on

 

Many Thanks Ric

Danny

[DannyH]

Just to let you know Ric that this is now working fine.

 

Thanks very much for your help

 

 

Danny

[Ric]

Hi Danny

Glad it works, after your post I updated the file also upgraded to Stunnel 4.25 see

 

http://wiki.uniformserver.com/index.php/St...l:_Install_4.24

 

All the best

Ric