Unknown Certificate for commercial SSL certificate
Moderator: Project members
Unknown Certificate for commercial SSL certificate
FileZilla Client version: 3.5.3
FileZilla Server version: 0.9.37
It is using a GoDaddy issued SSL certificate (in PEM format) in "SSL/TLS settings". And the server loads the private key file and certificate file fine.
However, the FileZilla client prompts with "Unknown certificate".
It lists 3 certificates in chain:
0 is my domain certificate.
1 is "Go Daddy Secure Certification Authority". (intermediate cert?)
2 is "The Go Daddy Group, nc." (root cert?)
Is it true that FileZilla client will always display the prompt "Unknown certificate", even for trusted CA (e.g. "Go Daddy Class 2 Certification Authority")?
Thanks,
James
FileZilla Server version: 0.9.37
It is using a GoDaddy issued SSL certificate (in PEM format) in "SSL/TLS settings". And the server loads the private key file and certificate file fine.
However, the FileZilla client prompts with "Unknown certificate".
It lists 3 certificates in chain:
0 is my domain certificate.
1 is "Go Daddy Secure Certification Authority". (intermediate cert?)
2 is "The Go Daddy Group, nc." (root cert?)
Is it true that FileZilla client will always display the prompt "Unknown certificate", even for trusted CA (e.g. "Go Daddy Class 2 Certification Authority")?
Thanks,
James
Re: Unknown Certificate for commercial SSL certificate
Correct.Is it true that FileZilla client will always display the prompt "Unknown certificate", even for trusted CA (e.g. "Go Daddy Class 2 Certification Authority")?
No support requests over PM! You will NOT get any reply!!!
FTP connection problems? Please read Network Configuration.
FileZilla connection test: https://filezilla-project.org/conntest.php
FileZilla Pro support: https://customerforum.fileZilla-project.org
FTP connection problems? Please read Network Configuration.
FileZilla connection test: https://filezilla-project.org/conntest.php
FileZilla Pro support: https://customerforum.fileZilla-project.org
Re: Unknown Certificate for commercial SSL certificate
How should FileZilla know the certificate is trusted, if not by asking the user first?
-
- 500 Command not understood
- Posts: 2
- Joined: 2012-07-11 19:05
- First name: Balal
- Last name: Ahmad
Re: Unknown Certificate for commercial SSL certificate
do we have any line by fileZilla for this that the error will be disabled for unknown certificate ?
Re: Unknown Certificate for commercial SSL certificate
FileZilla will always ask, no way around that. Once the user selects to perpetually trust this certificate (s)he won't be asked again for this one. Note that invalid (e. g. expired) certificates cannot be trusted permanently, the option is disabled in this case.
No support requests over PM! You will NOT get any reply!!!
FTP connection problems? Please read Network Configuration.
FileZilla connection test: https://filezilla-project.org/conntest.php
FileZilla Pro support: https://customerforum.fileZilla-project.org
FTP connection problems? Please read Network Configuration.
FileZilla connection test: https://filezilla-project.org/conntest.php
FileZilla Pro support: https://customerforum.fileZilla-project.org
-
- 500 Command not understood
- Posts: 2
- Joined: 2012-07-11 19:05
- First name: Balal
- Last name: Ahmad
Re: Unknown Certificate for commercial SSL certificate
Means do we have any link on filezella website said the same ?
Re: Unknown Certificate for commercial SSL certificate
This is part of the FileZilla website.
Re: Unknown Certificate for commercial SSL certificate
This is more of a suggestion for user experience.
How about renaming "Unknown Certificate" to "Certificate Review"?
"This server's certificate is unknown" can be replaced by "You haven't accepted this server's certificate for future sessions."
Users get alarmed when they see "Unknown Certificate" and "This server's certificate is unknown". These messages seem to suggest that Filezilla won't show that warning with "known" certificates. Admins keep thinking they can tweak the SSL certificate or configure the FTP server to avoid that warning.
I believe that by not using the word "unknown", it would avoid support questions.
BTW, FileZilla (client and server) rock!
How about renaming "Unknown Certificate" to "Certificate Review"?
"This server's certificate is unknown" can be replaced by "You haven't accepted this server's certificate for future sessions."
Users get alarmed when they see "Unknown Certificate" and "This server's certificate is unknown". These messages seem to suggest that Filezilla won't show that warning with "known" certificates. Admins keep thinking they can tweak the SSL certificate or configure the FTP server to avoid that warning.
I believe that by not using the word "unknown", it would avoid support questions.
BTW, FileZilla (client and server) rock!
Re: Unknown Certificate for commercial SSL certificate
FileZilla doesn't know any certificates by default. Remember, it does not use use the OS certificate store at all. Thus the word ''unknown'' is factually correct.These messages seem to suggest that Filezilla won't show that warning with "known" certificates.
Many users seem to take it as kind of a browser (which uses the store), but it is clearly not.
No support requests over PM! You will NOT get any reply!!!
FTP connection problems? Please read Network Configuration.
FileZilla connection test: https://filezilla-project.org/conntest.php
FileZilla Pro support: https://customerforum.fileZilla-project.org
FTP connection problems? Please read Network Configuration.
FileZilla connection test: https://filezilla-project.org/conntest.php
FileZilla Pro support: https://customerforum.fileZilla-project.org
-
- 500 Command not understood
- Posts: 2
- Joined: 2013-08-27 20:25
- First name: Erik
- Last name: Friesen
Re: Unknown Certificate for commercial SSL certificate
This definitely needs changing. This is one of those things that might have good reasoning behind it, but the "unknown" has to go.
Re: Unknown Certificate for commercial SSL certificate
Why? If it's unknown, how should it be trusted without the user's consent?
-
- 500 Command not understood
- Posts: 2
- Joined: 2013-08-27 20:25
- First name: Erik
- Last name: Friesen
Re: Unknown Certificate for commercial SSL certificate
It needs to be reworded. The average user will have about 10 red flags in his mind, when its really a "fault" of filezilla for not checking any certificates in the first place.
Something like "This certificate may or may not be valid, filezilla does not check certificates for validity, please review" etc etc.
Something like "This certificate may or may not be valid, filezilla does not check certificates for validity, please review" etc etc.
Re: Unknown Certificate for commercial SSL certificate
"Please verify and confirm that you trust the following certificate. That's one of the few things FileZilla can't do for you. Thanks."
No support requests over PM! You will NOT get any reply!!!
FTP connection problems? Please read Network Configuration.
FileZilla connection test: https://filezilla-project.org/conntest.php
FileZilla Pro support: https://customerforum.fileZilla-project.org
FTP connection problems? Please read Network Configuration.
FileZilla connection test: https://filezilla-project.org/conntest.php
FileZilla Pro support: https://customerforum.fileZilla-project.org
-
- 500 Command not understood
- Posts: 1
- Joined: 2013-09-07 07:41
- First name: santa
- Last name: film
Re: Unknown Certificate for commercial SSL certificate
is it solved?
i want to make my website ssl.does it word?
i want to make my website ssl.does it word?
<Removed advertisement>