Andy Burns <
usenet@andyburns.uk> writes:
Mike Spencer wrote:
Andy Burns wrote:
Mike Spencer wrote:
Using Linux, Seamonkey 2.40 but another user has had same problem,
same date Oct 1, using Windows.
<https://letsencrypt.org/docs/dst-root-ca-x3-expiration-september-2021>
Import the "ISRG Root X1" into seamonkey's certificate store under
authorities?
I don't know how to do that but I'll try to find out directly.
I'm sure you'll figure it, but use wget or curl or something to grab
the cert file from
https://letsencrypt.org/certs/isrgrootx1.der
it's also available as a .pem if you have a reason to prefer that.
Good. Thank you. Did figure it out. Seamonkey appears to be working
as expected with sites using ISRG certs.
Then (and this is where, as a TB/FF user, I have to assume that SM
is broadly similar) Tools/Settings/Security/Certificates, select
Authorities, click import and select the file you just downloaded.
Just so. Worked as intended. Next up: Try same for SM on Windows box
of SWMBO.
Digressing only slightly: Despite lots of (admittedly amateur) messing
about with assembler, C, Perl etc. from CP/M days into Linux and
TCP/IP, tech gets increasingly complex (in the technical as well as
the colloquial sense) and I've been getting old almost as fast since,
say, I first read K&R.
I'm not nearly as smart or as knowledgeable as Dan Geer but I'm
inclined to agree with him.
I am getting older, and I have to allow for the fact that perhaps that
explains everything, though I don't think so. I am, as a rule,
skeptical of coming to rely upon things that I don't know how they
work. If there's anything that I've come to be relatively adamant
about is that, as humans, we have repeatedly demonstrated that we can
quite clearly build things more complex than we can then manage, our
friends in finance and flash crashes being a fine example of that.
Given what I know in the cyber security arena, the number of things
that, in effect, nobody understands how they work causes me to say,
well, then why do I want to depend on it?
I understand basic concepts such as how PKC works in principle but the
whole HTTPS/PKC/certificate/digital-sig as a ball of wax remains
mostly a black box. Pop-up windows asking me to choose between or
approve things I don't understand are particularly intimidating. So
I'm hesitant to "just 'import' $FILE that comes from $SITE into $HUGE_COMPLICATED_APP and click 'OK'" when I don't understand most of
the pieces involved in doing that.
Well, in any case, I did that and all appears to be well.
I need a nice lucid book that explains this stuff, more detailed than pop-culture Luser level but less so than the large congeries of
relevant RFCs.
Usenet saves the day when the web goes dark! TYVM,
--
Mike Spencer Nova Scotia, Canada
--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)