Proxomitron certificate expired :( where can i get a new one?

Discussion in 'privacy technology' started by iceni60, Nov 28, 2006.

Thread Status:
Not open for further replies.
  1. iceni60

    iceni60 ( ^o^)

    Joined:
    Jun 29, 2004
    Posts:
    5,116
    i don't understand where there can be a problem o_O the ssl is still handled by openssl. and you can still look at the certificates for the sites.

    oh, you mean if you don't check the certificates manually, something could be spoofed without you knowing?

    i just like getting popups when a ssl connection is requested. :|
     
  2. herbalist

    herbalist Guest

    That is not a problem. If there's a problem with the sites certificate, Proxomitron will alert you directly. You will be prompted before your browser sees the page.
    http://i138.photobucket.com/albums/q277/herbalist-rick/ProxSSLcheck.gif
    http://www.geocities.com/sidki3003/prox-ssl.html
    If you keep the certs.pem file updated, Proxomitron will check site certificates with the exact same list that IE6 uses. Using Proxomitron for secure sites does not increase the risk of missing a bad certificate.
    Rick
     
  3. iceni60

    iceni60 ( ^o^)

    Joined:
    Jun 29, 2004
    Posts:
    5,116
    thanks, so if i clicked the allow button, instead of allow for session, then i'd only get that popup once? because i don't get that popup, but i suppose i had it the other day. i'll have to find another site to check it with the new certificates.

    how can i see the certificate for that site then?
     
    Last edited by a moderator: Dec 3, 2006
  4. herbalist

    herbalist Guest

    I dug out the original certs.pem file that came with my copy of Proxomitron to get that alert. It's very out of date.
    I don't know of a way to view the sites entire certificate with Proxomitron. When it alerts, it only shows the errors and partial info. In that instance, it showed their certificate to be expired.
    Photobucket seems to have a problem with that last image. It's there, but the links don't work. New copy.
    http://i138.photobucket.com/albums/q277/herbalist-rick/ProxSSLcheck-1.gif
    The "allow" button would be better labelled as "allow once". The "alow for session" button accepts the sites certificate for that browser session, actually for that session of running Proxomitron. Neither accepts it permanently.
    Rick
     
  5. iceni60

    iceni60 ( ^o^)

    Joined:
    Jun 29, 2004
    Posts:
    5,116
    great, thanks for the help :) i might try and find out how to view the site's certificate :cautious: i mainly use privoxy for http and proxo for https, then when i use TOR i chain them together :cool:
     
    Last edited by a moderator: Dec 3, 2006
  6. stalker

    stalker Registered Member

    Joined:
    Jan 19, 2004
    Posts:
    152
    Location:
    Ljubljana, Slovenia
    Hello all, I've stumbled across this thread after doing a Google Search for "new proxomitron cert". You see, the thing is that even after I've updated the certificate with the one from sidki's proxomitron site, I am still getting there prompt-windows (namely for "addons.mozilla.org", however, note that it hasn't appeared for a few days now, while previously, i.e. before updating the cert it did it every day), as I described it in this: Firefox 2.0 and Proxomitron's certificate prompt thread on CastleCops forums.


    stalker
     
  7. stalker

    stalker Registered Member

    Joined:
    Jan 19, 2004
    Posts:
    152
    Location:
    Ljubljana, Slovenia
    Well, I am just reporting back that even with the latest Sidki's certificate, I am still getting those prompts for "addons.mozilla.org". And yes, I tried with removing the old certificate under Tools -- Options... then Advanced tab, Encryption -- View Certificates (Web Sites)


    But the strange thing is that usually this happens when I am not even online (i.e. connected to the Internet), it occurs when browser is sitting there idle, therefore I am guessing that some Firefox's update mechanism is causing this. Although note that I've disabled the Firefox's update (for all, i.e. for Firefox/browser, for Installed Add-ons, and for Search engines), and I've also disabled the in-built "Phishing protection" completely, so updating of Firefox's local database couldn't be the cause for this.


    stalker
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.