Expired Server Certificate - Can't Check the Trust Boxes

Need help with FileZilla Client? Something does not work as expected? In this forum you may find an answer.

Moderator: Project members

Post Reply
Message
Author
dennyp
504 Command not implemented
Posts: 6
Joined: 2018-06-26 17:35
First name: Denny
Last name: Pasternak

Expired Server Certificate - Can't Check the Trust Boxes

#1 Post by dennyp » 2018-06-26 18:12

I am running 3.34.0 and am a new user. I couldn't find an answer for this in the forums.

When I login to my server, I get a message saying that I have an expired certificate. That is a correct finding. I just want to ignore it for now. However, the check boxes at the bottom to allow it to always trust the certificate are not active and cannot be checked. How can I circumvent that error? Thanks.

User avatar
botg
Site Admin
Posts: 32086
Joined: 2004-02-23 20:49
First name: Tim
Last name: Kosse
Contact:

Re: Expired Server Certificate - Can't Check the Trust Boxes

#2 Post by botg » 2018-06-26 19:00

This is intentional, expired certificates can only be ignored on a case-by-case basis, not permanently.

dennyp
504 Command not implemented
Posts: 6
Joined: 2018-06-26 17:35
First name: Denny
Last name: Pasternak

Re: Expired Server Certificate - Can't Check the Trust Boxes

#3 Post by dennyp » 2018-06-26 19:07

Thank you for your answer.

But then why is there a checkbox that says "Always trust certificate in future sessions" if you can't use it?

User avatar
boco
Contributor
Posts: 24434
Joined: 2006-05-01 03:28
Location: Germany

Re: Expired Server Certificate - Can't Check the Trust Boxes

#4 Post by boco » 2018-06-26 20:47

That checkbox is only for valid, non-expired certificates, because they can be trusted. Then, it is available and can be checked.
### BEGIN SIGNATURE BLOCK ###
No support requests per PM! You will NOT get any reply!!!
FTP connection problems? Do yourself a favor and read Network Configuration.
All FileZilla products fully support IPv6. http://worldipv6launch.org
### END SIGNATURE BLOCK ###

dennyp
504 Command not implemented
Posts: 6
Joined: 2018-06-26 17:35
First name: Denny
Last name: Pasternak

Re: Expired Server Certificate - Can't Check the Trust Boxes

#5 Post by dennyp » 2018-06-26 20:53

Thanks - that makes sense.

helviobrito
500 Command not understood
Posts: 1
Joined: 2018-07-15 10:55
First name: Hélvio
Last name: Brito

Re: Expired Server Certificate - Can't Check the Trust Boxes

#6 Post by helviobrito » 2018-07-15 11:14

I also can't select the check box. But, I remember that, in erlier versions, I did not experimented this annoying situaton. I can understand the security reasons. But, is there any way to by pass it? I am transfering huge directories and spending severy hours clicking the OK button.

User avatar
botg
Site Admin
Posts: 32086
Joined: 2004-02-23 20:49
First name: Tim
Last name: Kosse
Contact:

Re: Expired Server Certificate - Can't Check the Trust Boxes

#7 Post by botg » 2018-07-15 15:06

Just replace the server's certificate.

dennyp
504 Command not implemented
Posts: 6
Joined: 2018-06-26 17:35
First name: Denny
Last name: Pasternak

Re: Expired Server Certificate - Can't Check the Trust Boxes

#8 Post by dennyp » 2018-07-15 20:03

I have no need for one at this time and don't feel like spening the money right now. I added a self-signing certificate but that didn't change anything with FIleZilla.

User avatar
botg
Site Admin
Posts: 32086
Joined: 2004-02-23 20:49
First name: Tim
Last name: Kosse
Contact:

Re: Expired Server Certificate - Can't Check the Trust Boxes

#9 Post by botg » 2018-07-15 22:14

I have no need for one at this time and don't feel like spening the money right now.
We're living in 2018, certificates no longer cost money.
I added a self-signing certificate but that didn't change anything with FIleZilla.
Please check again. Did your server know that you added a new self-signed certificate?

dennyp
504 Command not implemented
Posts: 6
Joined: 2018-06-26 17:35
First name: Denny
Last name: Pasternak

Re: Expired Server Certificate - Can't Check the Trust Boxes

#10 Post by dennyp » 2018-07-15 22:17

Where do you get a free public certificate from? I can't find any.

I manage my own server and loaded a self signed certificate which was free.

User avatar
botg
Site Admin
Posts: 32086
Joined: 2004-02-23 20:49
First name: Tim
Last name: Kosse
Contact:

Re: Expired Server Certificate - Can't Check the Trust Boxes

#11 Post by botg » 2018-07-15 22:19

Where do you get a free public certificate from? I can't find any.
Use an internet search engine and click the first result.

dennyp
504 Command not implemented
Posts: 6
Joined: 2018-06-26 17:35
First name: Denny
Last name: Pasternak

Re: Expired Server Certificate - Can't Check the Trust Boxes

#12 Post by dennyp » 2018-07-15 22:30

The free ssl certificates only do domain validation and have to be newed every few months. I had one of those and some of the browsers give warnings to users that they are not secure. That was causing my clients some concern. So rather than a having a security message come up, I took the free certificate off. I don't do any eCommerce on that site. I have another server with a paid certificate on it for the eComerce.

User avatar
boco
Contributor
Posts: 24434
Joined: 2006-05-01 03:28
Location: Germany

Re: Expired Server Certificate - Can't Check the Trust Boxes

#13 Post by boco » 2018-07-16 03:15

If you have a correct self-signed certificate inside its validity period, FileZilla can accept it fine. Of course, browsers don't, but that isn't the subject of this topic.
### BEGIN SIGNATURE BLOCK ###
No support requests per PM! You will NOT get any reply!!!
FTP connection problems? Do yourself a favor and read Network Configuration.
All FileZilla products fully support IPv6. http://worldipv6launch.org
### END SIGNATURE BLOCK ###

Post Reply