Re: "This connection is untrusted" - Certificate Problem (445 Views)
Reply
Advisor
k1DBLITZ
Posts: 25
Registered: ‎06-08-2012
Message 1 of 4 (639 Views)

"This connection is untrusted" - Certificate Problem

Using Webinspect 9.20

 

Attempting to record a login marco for an internal site using an SSL certificate signed by our internal CA.

 

Details state:

 

"domainIamscanning.com uses an invalid security certificate.

The certificate is not trusted because the issuer certificate is unknown."

 

If I click "add an exception" and check "permanently store this exceptioin" it doesn't stick. 

 

I have also installed our Root and Intermediate certificates into the respective Windows Certificate Store and restarted WebInspect. It still refuses to trust the cert.

 

Any ideas?

--
blog.k1DBLITZ.com
Please use plain text.
Advisor
k1DBLITZ
Posts: 25
Registered: ‎06-08-2012
Message 2 of 4 (636 Views)

Re: "This connection is untrusted" - Certificate Problem

Update: I've also tried adding the root and intermediate certificates by launched the browser in the HP hive. It doesn't seem to carry over while in WebInspect...which seems odd. 

--
blog.k1DBLITZ.com
Please use plain text.
Advisor
k1DBLITZ
Posts: 25
Registered: ‎06-08-2012
Message 3 of 4 (445 Views)

Re: "This connection is untrusted" - Certificate Problem

I am also experiencing this same problem in Webinspect 9.30

--
blog.k1DBLITZ.com
Please use plain text.
Respected Contributor
HansEnders
Posts: 593
Registered: ‎07-01-2008
Message 4 of 4 (430 Views)

Re: "This connection is untrusted" - Certificate Problem

WebInspect does not use the IE browser, but its own internal-yet-equivalent one, and this includes the acceptance of certificates.  In actual use, the scanner simply accepts all certs and moves on, as its aim is to scan and not be a safe browser.

 

The complication here may be in the Macro Recorder and the replay of your Macro.  I would record the macro, but then mark any certificate acceptance sessions as "Optional".  With this edit, those sessions can either be present or not during the actual replay of the Macro during the live scan, and it will not affect the replay.


-- Habeas Data
Please use plain text.
The opinions expressed above are the personal opinions of the authors, not of HP. By using this site, you accept the Terms of Use and Rules of Participation