?
Solved

Security Alert - security certificate for this site is not available?

Posted on 2012-04-11
7
Medium Priority
?
565 Views
Last Modified: 2012-04-16
We have users that get this when they log in a PC and try to run their first credit card payment of the day. No matter which option you choose, it takes about 60 seconds to run the first transaction, after that it's OK. It's just a nuisance but a fix would be great.

revocation information
0
Comment
Question by:ParisAM
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 3
7 Comments
 
LVL 30

Expert Comment

by:Rich Weissler
ID: 37833692
Go ahead and view the certificate.  In the properties for the certificate should be a line for 'CRL' (Certificate Revocation List), which should have at least one (possibly more) methods of contacting the issuing CA to check to confirm that the certificate hasn't been revoked.  http or ldap URLs are frequently seen in that entry.  Determine why the workstation can't read from the CRL location, and fix that, and the Alert messages should go away.
0
 

Author Comment

by:ParisAM
ID: 37833716
If this helps - This happens when making a payment on our system that was created by our own programmers, could this be something they need to fix?

When I view the certificate details, here's what I see:

cert1cert2cert3
0
 
LVL 30

Accepted Solution

by:
Rich Weissler earned 1500 total points
ID: 37833784
Yep.  That helps.  I went ahead and pointed myself at that website, and pulled up the certificate locally.  The CRL Distribution point in the certificate says it's:

http://EVIntl-crl.verisign.com/EVIntl2006.crl

I confirmed that I can get there.  Are there any network ACLs which prevent that user from being able to access the verisign server on port 80?  (You can see if you can hit that URL from that workstation...)
0
How Blockchain Is Impacting Every Industry

Blockchain expert Alex Tapscott talks to Acronis VP Frank Jablonski about this revolutionary technology and how it's making inroads into other industries and facets of everyday life.

 
LVL 30

Expert Comment

by:Rich Weissler
ID: 37833795
(If you wanted to find where I'm looking... on the 'details' tab, scroll down to the 'CRL Distribution Points' field.)
0
 

Author Comment

by:ParisAM
ID: 37844777
We can access that link with no problem....
0
 
LVL 30

Expert Comment

by:Rich Weissler
ID: 37847313
*blink*  But... that's what the error means.  
Okay... what about if you try to access that machine first thing.. before any transactions are run from the computer?  Does it still work okay?  (Any chance it's actually a DNS problem, and the sixty seconds is the time it takes the system to try a second DNS server?)

Is it at all possible that the date on the computer being used for CC processing is wrong by something in terms of days or weeks, such that the CRL looks out of date?
0
 

Author Closing Comment

by:ParisAM
ID: 37852778
Well, you pointed us in the right direction. I showed our programmer and she said that only certain machines (cash register machines) were OK, while other call takers processing payments were getting it. Something do with with accessing an AS400 server.

Thanks for the quick responses and help.
0

Featured Post

VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

New Windows 7 Installations take days for Windows-Updates to show up and install. This can easily be fixed. I have finally decided to write an article because this seems to get asked several times a day lately. This Article and the Links apply to…
The Windows functions GetTickCount and timeGetTime retrieve the number of milliseconds since the system was started. However, the value is stored in a DWORD, which means that it wraps around to zero every 49.7 days. This article shows how to solve t…
Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …
Suggested Courses

801 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question