Page 1 of 1

"Always trust certificate" checkbox disabled

Posted: 2011-07-12 12:59
by Paddy Landau
My web host uses a certificate with a different name from the FTP.

Therefore, I always get the "Unknown certificate" error.

Additionally, the certificate is expired (the date is wrong on the certificate; it comes before the start date).

I wish to check the box "Always trust certificate in future sessions." However, that checkbox has been disabled (see screenshot).

I've tried searching for a solution to this problem, and looked at my FileZilla settings, but I cannot see what to do.

Are you able to tell me what to do?

FileZilla version: 3.3.1
OS: Linux Ubuntu 10.04

Re: "Always trust certificate" checkbox disabled

Posted: 2011-07-12 14:01
by boco
My web host uses a certificate with a different name from the FTP.

Therefore, I always get the "Unknown certificate" error.
FileZilla not inherently trusts certificates. No matter what, you'll always be presented that message.
Additionally, the certificate is expired (the date is wrong on the certificate; it comes before the start date).

I wish to check the box "Always trust certificate in future sessions." However, that checkbox has been disabled (see screenshot).

I've tried searching for a solution to this problem, and looked at my FileZilla settings, but I cannot see what to do.

Are you able to tell me what to do?
The certificate is not expired, but simply broken/invalid: It doesn't have a valid expiration date configured (stored as zero, shows as 1970-01-01 in UNIX Time). This is a required field and you should take it very seriously. We deal with precious security stuff here! Eternal certificates do not exist.

The checkbox being disabled is the direct result from the above. FileZilla doesn't allow storing certificates it deems expired. That certificate is broken and must be re-issued.

You should try with another FTP client: Does the other client show the right date?

Re: "Always trust certificate" checkbox disabled

Posted: 2011-07-12 14:24
by Paddy Landau
boco wrote:This is a required field and you should take it very seriously. We deal with precious security stuff here! Eternal certificates do not exist.
I realise. I have checked the host (it is GoDaddy, who hosts my sites), and I am certain that it is a valid site.
boco wrote:The checkbox being disabled is the direct result from the above. FileZilla doesn't allow storing certificates it deems expired. That certificate is broken and must be re-issued.
That's a shame. I've spoken to GoDaddy, and it is completely unconcerned (the only time I've ever had less than outstanding customer service from that company). I shall try again.
boco wrote:You should try with another FTP client: Does the other client show the right date?
I tried Firefox, which did not complain, and bareFTP, which did complain. I'm sure you are right that the certificate is incorrect; but I wish I could tell FileZilla to accept it automatically without having to click it every time I use it.

Thanks for your time.

Re: "Always trust certificate" checkbox disabled

Posted: 2014-09-19 07:46
by FileGamer
I know you Filezilla developers will probably recommend against this, but I'm building for my own personal use, so I'd like to ask here. Where are the values (for allowing certificates expired or thought to be expired to be stored) in the source code?

Re: "Always trust certificate" checkbox disabled

Posted: 2014-09-29 01:00
by FileGamer
FileGamer wrote:I know you Filezilla developers will probably recommend against this, but I'm building for my own personal use, so I'd like to ask here. Where are the values (for allowing certificates expired or thought to be expired to be stored) in the source code?
*The values for the popups that appear when Filezilla sees a so-called expired certificate.

Re: "Always trust certificate" checkbox disabled

Posted: 2014-09-29 07:26
by botg
It appears by now the certificate in question has been updated to no longer be expired.

Re: "Always trust certificate" checkbox disabled

Posted: 2014-09-30 05:37
by FileGamer
botg wrote:It appears by now the certificate in question has been updated to no longer be expired.
Wha? No, I was asking about where the code for disabling the notifications of accepting expired certificates is in the source code?

Re: "Always trust certificate" checkbox disabled

Posted: 2014-09-30 07:05
by botg
I think that's a terrible idea, you should not do that. Certificate expiry is there for a reason. If you must for some ill-conceived reason, search the source for expired.