• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 5064
  • Last Modified:

Certficate Error: Navigation Blocked

Hi,
I've looked all over for this solution and nothing documented, that I've found, has worked.
I'm using IE8 to get to my companies web-based email client, Zimbra, on their Intranet.
I get "Certificate Error: Navigation Blocked"

I'm pretty sure it's because it's the Subject in the Certificate, because it just lists the domain name without the https://.

Regardless, and short of making them re-issue the certificate correctly, how do I avoid getting this error every time I go to this page?

Thanks!
0
bigtwig
Asked:
bigtwig
  • 3
  • 3
2 Solutions
 
mikainzCommented:
you have to download the whole certificate chain and install the root certificate into the trusted root certificate authority store.
 
see http://tldp.org/HOWTO/SSL-Certificates-HOWTO/x175.html
0
 
Dave HoweSoftware and Hardware EngineerCommented:
that's fine - it *should* just list the domain name.

Normally though, it will give the reason for the block, and normally (particularly for things like zimbra) it is because it is self signed or issued by an internal ca, rather than a commercial one. normally, you can also agree to continue with the process even if it fails.

here is an example of text from IE8:

cert-issue.gif
0
 
bigtwigAuthor Commented:
@@mikainz - I've already done that.  It still pops up everytime.

@@DaveHowe - it lets me access the site every time, but I have to look at the error and it's an extra step.  I've read many places that it 'remembers' you chose to 'continue to the website' but that is not the case for me.
0
Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

 
Dave HoweSoftware and Hardware EngineerCommented:
bigtwig: what I am saying is you need to look at what the error message actually says, as it will tell you what it is finding objectionable about the certificate.
0
 
bigtwigAuthor Commented:
Neither suggestion actually worked for me.  I changed the URL I was going to to be "http:" and not "https:" and my problem went away.  When I try to go to the "https:" URL, none of the suggestions worked, nor did I find anything in EE or in any Google searches. Thanks, Mike
0
 
bigtwigAuthor Commented:
Neither suggestion actually worked for me. I changed the URL I was going to to be "http:" and not "https:" and my problem went away. When I try to go to the "https:" URL, none of the suggestions worked, nor did I find anything in EE or in any Google searches. Thanks, Mike
0
 
Dave HoweSoftware and Hardware EngineerCommented:
Firefox has a "remember mismatched domains/selfsigned" utility (now built in) but that won't allow you to ignore certificates that are expired/out of date - which is why you need to read the error to see what is objectionable....
0

Featured Post

2018 Annual Membership Survey

Here at Experts Exchange, we strive to give members the best experience. Help us improve the site by taking this survey today! (Bonus: Be entered to win a great tech prize for participating!)

  • 3
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now