Solved

Security Alert - security certificate for this site is not available?

Posted on 2012-04-11
7
553 Views
Last Modified: 2012-04-16
We have users that get this when they log in a PC and try to run their first credit card payment of the day. No matter which option you choose, it takes about 60 seconds to run the first transaction, after that it's OK. It's just a nuisance but a fix would be great.

revocation information
0
Comment
Question by:ParisAM
  • 4
  • 3
7 Comments
 
LVL 29

Expert Comment

by:Rich Weissler
Comment Utility
Go ahead and view the certificate.  In the properties for the certificate should be a line for 'CRL' (Certificate Revocation List), which should have at least one (possibly more) methods of contacting the issuing CA to check to confirm that the certificate hasn't been revoked.  http or ldap URLs are frequently seen in that entry.  Determine why the workstation can't read from the CRL location, and fix that, and the Alert messages should go away.
0
 

Author Comment

by:ParisAM
Comment Utility
If this helps - This happens when making a payment on our system that was created by our own programmers, could this be something they need to fix?

When I view the certificate details, here's what I see:

cert1cert2cert3
0
 
LVL 29

Accepted Solution

by:
Rich Weissler earned 500 total points
Comment Utility
Yep.  That helps.  I went ahead and pointed myself at that website, and pulled up the certificate locally.  The CRL Distribution point in the certificate says it's:

http://EVIntl-crl.verisign.com/EVIntl2006.crl

I confirmed that I can get there.  Are there any network ACLs which prevent that user from being able to access the verisign server on port 80?  (You can see if you can hit that URL from that workstation...)
0
Top 6 Sources for Identifying Threat Actor TTPs

Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

 
LVL 29

Expert Comment

by:Rich Weissler
Comment Utility
(If you wanted to find where I'm looking... on the 'details' tab, scroll down to the 'CRL Distribution Points' field.)
0
 

Author Comment

by:ParisAM
Comment Utility
We can access that link with no problem....
0
 
LVL 29

Expert Comment

by:Rich Weissler
Comment Utility
*blink*  But... that's what the error means.  
Okay... what about if you try to access that machine first thing.. before any transactions are run from the computer?  Does it still work okay?  (Any chance it's actually a DNS problem, and the sixty seconds is the time it takes the system to try a second DNS server?)

Is it at all possible that the date on the computer being used for CC processing is wrong by something in terms of days or weeks, such that the CRL looks out of date?
0
 

Author Closing Comment

by:ParisAM
Comment Utility
Well, you pointed us in the right direction. I showed our programmer and she said that only certain machines (cash register machines) were OK, while other call takers processing payments were getting it. Something do with with accessing an AS400 server.

Thanks for the quick responses and help.
0

Featured Post

IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

First some basics on Windows 7 Backup.  It has 2 components one is a file based backup which is stored in .zip files each zip is split at around 200 Megabytes and there is the Image Backup which is as the name implies a total image of the partition …
The recent Microsoft changes on update philosophy for Windows pre-10 and their impact on existing WSUS implementations.
This Micro Tutorial will give you a basic overview of Windows DVD Burner through its features and interface. This will be demonstrated using Windows 7 operating system.
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now