Problem with SDN's Server Side Security Certificate

[Former Member]

It seems that something happened to the server side certificate a couple of days ago (I assume it expired). When opening SDN pages in the browser (tried in IE 7 and FF2), a security warning comes up:

There is a problem with this website's security certificate.

The security certificate presented by this website was not issued by a trusted certificate authority.

[Former Member]

The list of trusted root certification authorities used by IE7 is periodically updated by Microsoft windows update downloading and installing a new list.

The new certificate used by SAP was issued by:

CN = Cybertrust SureServer Standard Validation CA

O = Cybertrust Inc

But the only Cybertrust entry on my IE7 install was:

CN = Cybertrust Global Root

O = Cybertrust, Inc

- it appears the two are not accepted as the same, and this was causing the error. Downloading and installing the first of the files listed in the cybertrust link fixed the problem for me.

No doubt Microsoft will catch up some time soon, but I wanted to continue without the annoying messages.

Andrew

[RichHeilman]

I'm seeing the same Matthias, I think it started last night for me.

Regards,

Rich Heilman

[David]

Hi Guys,

This seemed bizarre to me as well. It only affected IE7 up to now, but I guess it spreads like a disease.

One of the other members sent me this information via the sdn@sap.com address which he found resolved the problem for him.

I have fixed my problem - The issue was that IE7 does not get automatically

updated with the details of new trusted certificate authorities.

I had to download the required details from Cybertrust and install them.

The following explains:

http://cybertrust.omniroot.com/support/sureserver/root_install_iis.cfm

SSL server certificates

Preparing your IIS server for SureServer SSL certificates:

-

---

-

---

To install the Cybertrust SureServer intermediary root certificate into IIS,

Please proceed as follows:

Download the following files:

SureServer SSL certificates issued after 23 April 2007

- GTE CyberTrust Global Root

- Cybertrust SureServer Standard Validation CA

or

SureServer SSL certificates issued after 23 February 2005

- GTE CyberTrust Global Root

- Cybertrust SureServer CA

Installation Instructions

Download and Install these certificates by double clicking on the

corresponding file wizard

Install the GTE CyberTrust Global Root certificate(s) manually in the

"Trusted Root Certification Authorities" store:

"Show physical stores/Trusted Root Certification Authorities/Local

Computer".

Install the Cybertrust SureServer CA in the "Intermediate Certification

Authorities" store:

"Show physical stores/Intermediate Certification Authorities/Local

Computer".

[eddy_declercq]

Hi,

Isn't a better idea to switch CA instead of asking all the SDN members to do this extra install?

Eddy

[Former Member]

I think the whole explanation is strange. Should end-users, even those with IE7 install an IIS first, just to be able to follow the procedure mentionend?

IMHO the explanation is aimed at the server side, i.e. how to configure your MS webserver for new certificates, but not on how to import new ceritifcates or CAs to an ordinary client.

anton

[eddy_declercq]

Hi,

There is an issue with Safari and all webkit related products like Adobe AIR for the client side certificate for authentication challenge, but that is likely not related to this Cybertrust issue (if it is one)

Eddy