republican-creole
Search:  

 
 
   All ForumsHot TopicsGallery






how-to block ads


 
Forums » Expired Certs Cause Headaches
Search Topic:
view: topics flat text 
Post a:

Comments on news posted 2004-01-08 16:57:04: If you're experiencing random system slowdowns today, you're not alone. Users in our Security forum have been keying in on an issue with expired Verisign SSL certificates, responsible for a number of application headaches over the past few days. ..

page: 1 · 2
AuthorAll Replies


lakino
Premium
join:2003-04-03
Campbell, CA
painfully slow....

I feel the pain! Now I understand where it's coming from...

Grrrrrrrrr....
--
Why do people like .sig files so much? Baffling to me...


Mellow
Premium
join:2001-11-16
Salisbury, MD
ahh

I just figured it was time to defrag


BigCreek
God Is Good.
Premium
join:2002-06-25
Heber Springs, AR
I haven't noticed anything ...

Course I run Linux.


hurleyp

join:2000-06-20
Ottawa, ON
·Rogers Hi-Speed

Certs!

I noticed that my machine was really crawling this morning. I checked for the usual suspects, ran Ad-Aware, Spybot, disk clean up, etc. I have a nice clean system, but I guess the problem was not between the chair and the keyboard this time!

I hope this is cleaned up PDQ!


outspoken72
An Irish Jayhawk
Premium
join:2000-10-03
...sending...reports....

must....defrag....oh....wait...it's due....to...expired....certs....great...will ...get done...when....I can.
--
"The grass may be greener on the other side, but you sill have to mow it."


StuartMW
Who Is John Galt?
Premium
join:2000-08-06
Austin, TX
Now I know why ...

I got invalid certificate messages from some financial institution sites this morning. Seems they didn't update their servers as Verisign instructed.
--
Don't feed the trolls--it only makes them grow!


Smitedogg
Uzbekikitty
Premium
join:2000-11-11
Pueblo, CO

reply to BigCreek
Re: I haven't noticed anything ...

I run Linux, and have had a few problems. One example is how Evolution doesn't like connecting to my mail-server with its now-expired certificate. It hangs for a good minute before printing out the problem. Another is using Mozilla at certain sites.

Dogg
--
Lexing is...well, I don't know. It's driving me nuts!

RafS

join:2003-03-06
New York, NY
reply to lakino
Re: painfully slow....

Well, too late, wish I'd read it before i defraged, ran ad-aware, spybot, disk cleanup...lol


Jason Levine
Premium
join:2001-07-13
USA
I don't use Verisign

Luckily, I don't use Verisign for SSL certs for my company's sites so users shouldn't experience any of the problems while browsing with us. We use GeoTrust instead. They are much less expensive.


USAOwnz
RIP dadkins
Premium
join:2003-11-15
P.R.C.
clubs:
reply to outspoken72
Re: ...sending...reports....

Bleh thought it was beacause i had to defrag again.
--
¡Viva la Revolución!


catseyenu
Ack Pfft
Premium
join:2001-11-17
Fix East

Verisign Strikes Again...

»slashdot.org/article.pl?sid=04/0···2&tid=95
"by Anonymous Coward on Thursday January 08, @03:47PM (#7919934)
In an effort to have us forget about SiteFinder, they're going for an even bigger f-_k-up.

Nice try, guys... now turn the CRL server back on."

LMAO!


viperpa33s
Why Me?
Premium
join:2002-12-20
Bradenton, FL
·Bright House

They should be called Veristink

The company that I work for, the Verisign certificate for there website expired last night at around 7pm. After contacting the web hosting site IBM, and tracing the problem back to Verisign, was able to get the website up and running about 3 hours later.

The question is, who is responsible for this snafu? First we had the problem with Verisign rerouting people to there website if a person misspells a name. Now we have Verisign SSL certificates expiring causing many websites to go down and applications not working correctly. Seems to me that Verisign needs more oversight or there position over the internet taken away from them.


JAAulde
yum yum yum yum yum
Premium,MVM
join:2001-05-09
Hagerstown, MD

reply to BigCreek
Re: I haven't noticed anything ...

said by BigCreek See Profile:
Course I run Linux.

Course that has nothing to do with it.

cagr

join:2004-01-08
San Diego, CA

reply to lakino
Re: painfully slow....

Like others I think I'm having this problem today but I'm not that technical savvy when it comes to troubleshooting problem so maybe if I explain what's going on you can tell me if this is related.

When I went to use my computer today, programs such as word, excel, norton were taking forever to open. I'd just get the nice hourglass icon and then 30 seconds later the program would open. Also when I right click on any file or folder, the same thing happens.

I've defragged, run spypot and ad-aware, used the online scan at mcafee.com, and also run a full system scan using norton and everything shows up clean.

Am I way out in left field with this or are my problems related to what is going on with these certs?

colton2

join:2002-10-26
reply to viperpa33s
Re: They should be called Veristink

LoL I too ran disk cleanup, defrag, adaware, spybot, and made sure settings were ok. Doh!


Logwind

join:2003-06-20


2 edits
Verisign?



Can someone explain what a certificate actually does and how its expiration can induce slow downs in multiple pieces of software?

From the thread in the Security forum, I'm surmising that NAV users comprise the majority that's being affected. I'm using AVG and am experiencing nothing out of the ordinary.

Thanks.
--
PIPE.


MEDIAN2k3
Where Ya Goin?
Premium
join:2002-12-04
Bronx, NY
clubs:
ool country

no slow down here in ool country.
--
I Shall Call Him Mini Me!!!

DA

join:2002-04-13
Greenville, SC
·Charter Pipeline
·ViaTalk

reply to viperpa33s
Re: They should be called Veristink

said by viperpa33s See Profile:
The question is, who is responsible for this snafu?

No offense but you are responsible for the snafu, the expiration of this certificate was announced when it was issued. I am no fan of Verisign but this was not their fault, the certificate expired when it was due to expire.


Maggs
Premium
join:2002-11-29
Woodside, NY
·RCN CABLE


2 edits
Certs Debunked


cert with MD5 checksums

128 bit encryption
What a security cert is, its a lock and key system. If a site has a lock, the cert is the key to enable safe transport of data across a network. When Verisign's certs expire and are not renewed applications that rely on them often don't trust the server they are connected to. Would you trust a guy that just came up to you asking for money for a charity without proper documentation?

When these site certs expire, the programs automatically check to make sure everything is on the up and up by going to Verisign Certification Revocation List (CRL) server, to make sure the program hasn't missed a notice and the program you use updates its cert records on the spot. Even Internet Explorer uses certs to verify data and the identity of a remote computer, such as the ones used by your bank in Online Banking Transactions.

One way to check the validity of a site is to double click the lock icon when you see it on a site. This will open the SSL properties for the cert.

The certificate will give you a couple of pieces of info these include:

Try »https://www.bankone.com

You will see the closed lock icon. If you double click you can see its properties.

Shown are two examples of SSL cert pages in Mozilla, the alternative to Internet Explorer with a built in popup blocker.

My college has a secure site that is 1024 bit encrypted. Bank One is only 128 bit encrypted. 128 bit is the most common encryption method, it took a team of people on BBR 5 years to "brute force" a 72 bit key, check out the RC5 project here on BBR for more details.

NOTICE: the https:, this means Bank One is a secure site always look for that in your address bar, and also double click the icon since A LOCK CAN BE FAKED, if you know what to do.

Verisign messed with my credit card company Capital One for 6 months on a domain name charge that I cancelled and they kept billing, so I wouldn't trust them as far as I could throw the CEO.

rid0617

join:2003-07-20
Greer, SC
Hmmmm

Well, at least I now know there are to spyware programs and my computer is nicely defragged.
Forums » Expired Certs Cause Headachespage: 1 · 2


Friday, 27-Nov 16:54:54 Terms of Use | Privacy Policy | Hosting by www.nac.net - DSL,Hosting & Co-lo | feedback | contact
over 10 years online! © 1999-2009 dslreports.com.
page compression OFF