Announcement

Collapse
No announcement yet.

[Dome Shield] https strange behavior (selfgenerated certificate)

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • [Dome Shield] https strange behavior (selfgenerated certificate)

    Hi,

    when blocking a https site, the local roaming agent (I suppose) is generating a selfsigned certificate,
    not trusted by anything.

    is it possible to make it trusted or maybe redirect automatically to an error window on http ?

    by the way it's very strange/not explained no where how it works.

    surprising.

  • #2
    In fact, very strange behavior that can also block not filtered sites.

    Try to go on https://www.google.com/business/ and clic on "Sign IN" button.
    you will certainly face with certificate error message, forbidding to progress, and.. that's in fact the COMODO certificate that generate this error.
    Please fix.

    Comment


    • #3
      rbo

      Hello,
      Thank you for informing us and the screenshots. We will contact you via e-mail in order to further investigate the problem.

      Comment


      • #4
        Hi rbo,

        You address the issue correctly, this occurs when you have been blocked within SSL connection and since we are redirecting you our error page with our self signed certificate, you get this error.
        If you install this self signed certificate as trusted root certificate, you wont have any problems.

        This will be improved with further releases. At least make our documentation better about this.

        Comment


        • #5
          1) I tried by exporting certificate from Firefox (not possible via IE) and then adding has exception for 1 site, problem: need to do that for every sites, maybe because certificate is expired.
          2) on Internet explorer not working, also maybe because certificate is expired.

          are you sure this function has been tested on all uses cases ? I'm surprised on the behavior, in all cases it's not usable as is.

          Comment


          • #6
            Hello rbo ,

            We are looking into it and will advise further as soon as possible.

            Comment

            Working...
            X