September 6th, 2011
SSL Certs & Nokia mobiles... and other stuff
Forgive me Internet for i have sinned. It's been ten and a half months since my last blogpost although I have tried to write, albeit not very hard.
There's been a lot of changes here at Wavysworld over the last year or so, so this post is going to be about the tech side of things. If you're not interested in the tech stuff, you know what to do...
My hosting provider in the UK shut down there services earlier this year, which meant a frantic casting about for a new provider. I decided I wanted a Malaysian host, partly due to cost, but mainly because I wanted a provider who would have the same working day as me. After looking at a number of options, and reading about some frankly quite scary outages from some suppliers, I settled on Shinjiru who have been, so far, excellent.
On top of a very well specced box, I'm running Domino 8.5.x including Traveler for mobile email, which is running on a new-ish Nokia E-5, which is where I come to the subject of this post's title. Because I don't like sending my user ID and password over the air, or wire, unencrypted (ever, and nor should you), I have an SSL certificate from CA Cert for both this site, and the Ironworks (which has also been badly neglected of late). CA Cert don't charge for issuing a certificate, but it will only last for six months (there's a Web of Trust programme that builds towards verification, but that's another post). Also, CA Cert isn't one of the Trusted CAs that normally have their certificates bundled with every common browser.
What happened today was that I updated the certificates for Wavysworld and the Ironworks... and Traveler promptly failed. Despite accepting the new certificate permanently every time my phone tried to update my email, I was getting consistent SSL failures. I tried opening the site itself through SSL (for non-techies who're actually reading this, that's using https:// rather than http:// ); again with the failures.
I went into the phone's security store, where it stores security exceptions, such as when a certificate is self-signed, or refers to a slightly different host), and there were the old certificates - it transpires that despite accepting the new certificates, the Nokia security software will not let them overwrite previous versions even if they've expired.
I deleted the old ones and tried the site again, and all was good, and Traveler reported a successful connection.
Just a minor Gotcha, but I'm glad to have sorted out quickly, and it's one to bear in mind if I come across a site using self-signed certs in the future.
Created 04/12/2011 15:31:48 by http://www.coachoutletonlines-store.com
(http://www.coachoutletonlines-store.com http://www.coachoutletonlines-store.com)
Warrant Officer www.coachoutletonlines-store.com Nikolai Ponomaryov said he was voting for United Russia,[url={ Link } Outlet[/url] because the party was [url={ Link } Outlet Online[/url] supporting the armed forces.
[2] http://www.coachoutletonlines-store.com
Created 04/12/2011 15:33:30 by Coach Outlet Online
(Coach Outlet Online http://www.coachoutletonlines-store.com)
On Friday, www.coachoutletonlines-store.com Golos was fined the equivalent of $1,000 ([url={ Link } Outlet Online[/url]) by a Moscow court for violating a law that prohibits publication of election opinion research for [url={ Link } Outlet[/url] five days before a vote.
[3] tiffany jewelry Outlet
Created 03/01/2012 10:49:52 by tiffany jewelry Outlet
(tiffany jewelry Outlet http://www.discounttiffanyshop.com/)
Thanks for such a great publish and the examine, I am completely impressed! Keep stuff like this coming. { Link }
/
[4] replica watches
Created 03/01/2012 10:52:34 by replica watches
(replica watches http://www.cheapwatchmarket.com/)
All kinds of replica watches are available,Consumer are able to have the look of the prestigious watch without having to drop thousands of dollars in the process.Replica watches sale are ideal replacements for the real thing. You could buy watches on our web site and there are lots of discount watches waitting for you!
[5] large watches
Created 02/02/2012 08:38:58 by large watches
(large watches http://www.samewatches.net)
{ Link } replica Daytona { Link } replica rolex watches for sale { Link } replica Bell & Ross
[6] wedding jacket
Created 02/02/2012 08:41:26 by wedding jacket
(wedding jacket http://www.partdress.com)
{ Link } vintage dresses { Link } mother of the bride dresses cheap { Link } summer cocktail dresses
[7] aion gold
Created 15/02/2012 14:17:47 by aion gold
(aion gold http://vi4s.com)
Now,I want to recommend a reliable website for you to get runescape powerleveling on. That’s eden eternal gold. On this website, there are also a large number of cheap eve isk for sale.
{ Link }
{ Link }
