#5534 HIGH Update.: Browse cannot connect to sites with non-standard Certificate Authorities

[Zarro Boogs per Child]

#5534: Browse cannot connect to sites with non-standard Certificate Authorities
------------------------------+---------------------------------------------
  Reporter:  cscott           |       Owner:  erikos  
      Type:  defect           |      Status:  reopened
  Priority:  high             |   Milestone:  Update.2
 Component:  browse-activity  |     Version:          
Resolution:                   |    Keywords:  relnote 
  Verified:  0                |    Blocking:          
 Blockedby:  5487             |  
------------------------------+---------------------------------------------

Comment(by cscott):

 Copying the certs file from an existing machine does work with whatever
 update.1 build was current as of January 15.  I'm not terribly surprised
 that it doesn't work with the certs file from a Windows machine, since it
 is a gross and evil hack.  Be careful you're overwriting the correct copy
 of the certs file: Browse has a copy inside the activity which is used to
 create an appropriate certs file in the profile on first start up.
 Overwriting the copy in the activity only works if you've never launched
 Browse on that particular machine before; otherwise you need to hunt down
 the copy in the activities instance directory.

 RC4 128-bit is pretty insecure -- see Wikipedia for one long list of flaws
 found in RC4 -- I wouldn't be terribly surprised to find that it wasn't on
 SSL's default accept list anymore.  byte, could you supply a URL which
 uses the certificate in question, to allow us to investigate?

-- 
Ticket URL: <http://dev.laptop.org/ticket/5534#comment:24>
One Laptop Per Child <http://dev.laptop.org>
OLPC bug tracking system