Certificate verification

[shanklej]

Hi Greg,
Thanks for satelliteguys,
Just info:
A windows shows up every time I sign on to Satelliteguys.
Its complains that satelliteguys's certificate is not valid.
I click continue but have no idea what damage it might do.
Shanklej

 

[Scott Greczkowski]

We do not support HTTPS so just use http:// and not https://

 

[harshness]

I've been using LetsEncrypt on my personal VPS-based web, mail and sftp server for a few months now and it is working pretty well. Someone finally cobbled some scripts together that make it a lot less painful to maintain their short-lived certs.

That said, there's is considerable overhead involved in using TLS.

 

[shanklej]

To Scot,
I am not using https.
To Harshness,
I have no idea what you are talking about.
I am not using either item you mentioned.
I do use ESET SS and wonder if that is the problem?

 

[Scott Greczkowski]

If its talking about certificates then its trying to us https / ssl. Thats about all I can tell you there, I don't know anything about the program you mentioned.

 

[harshness]

I am not using https.

You wouldn't be presented with a certificate dialog if something wasn't trying to use HTTPS. ESET is definitely the culprit here and it looks as if they may be trying to pull off some sort of "man-in-the-middle" (MITM) situation to secure at least part of the path.

In looking at the ESET forums, ESET apparently does do an MITM when it can't force a direct HTTPS connection by converting an HTTP request into an HTTPS request.

Because Satelliteguys doesn't support secure connections ESET wants you to accept their certificate to complete the MITM connection.

My post was pointed at Scott's post and I acknowledge that it was not evident.

Note that SSL V3 was compromised by the Heartbleed, BASH and POODLE trojans. TLS is the new security scheme of choice. The certificates themselves don't change, just the way they are negotiated.

 

[shanklej]

I also agree it's ESET causing the problem. Trouble is every time I sign
on to Satelliteguys I get the same certificate problem

 

[harshness]

Trouble is every time I sign on to Satelliteguys I get the same certificate problem

I'm guessing that you didn't install the ESET certificate.