-
After 15+ years, we've made a big change: Android Forums is now Early Bird Club. Learn more here.
Keep getting: "Security certificate not from a trusted Authority"
- Thread starter BWRpota
- Start date
I believe it's because they are not signed. The certificates that is,I wouldn't worry to much. The (s) at the end of the (http) means a secure site.
These are pages containing job application forms.
If I disregard the warning, how will I be able to distinguish the bad pages?
There really won't be any "bad" pages to find. Most likely what they have done is self-signed the certificate which means a certifying agency can't verify it's authenticity. We do that all the time for areas of our website that needs to be secure, but we don't want to shell out the $$$ for a certificate for our internal use.
You've most likely been given a URL to the company's intranet.
On my laptop I get these fairly often - generally the site is signed but the browser doesn't have the signing authority on it's "trusted" list (it's usually work-related sites for me, and I expect I'd personally trust the companies Firefox, or whoever they use, thinks are fine far less than the institutes it tells me it has doubts about 
). In that case I check who is doing the signing and add it to the trusted list myself.
I've never had to handle this on a phone, though I don't usually visit such sites from my phone either. What browser are you using, and does it let you view the certificate from the site?
Edit: grief, I keep being ninja'd tonight! Maybe I should just go and do some work instead...
). In that case I check who is doing the signing and add it to the trusted list myself. I've never had to handle this on a phone, though I don't usually visit such sites from my phone either. What browser are you using, and does it let you view the certificate from the site?
Edit: grief, I keep being ninja'd tonight! Maybe I should just go and do some work instead...
If you are asking I assume it means you are using your phone's pre-installed browser. That's one I can't test, as I don't have a Samsung.
But I think we have a consensus that you're probably safe.
But I think we have a consensus that you're probably safe.
It doesn't matter which phone you have in this case, but Android version does matter. You need at least 4.0.x to install a certificate.
First you'll need a copy of the certificate. Android browsers don't let you install the certificate directly like some desktop browsers do. I haven't found one that could save them either, so here's how I did it.
Open the site on a desktop browser. I used chrome, but you can use IE, too as long as you run it as administrator. Once you bypass the security warning you should see a red icon in the address bar. On Chrome it's the lock with the red "X" on the left, on IE is a red shield on the right. If you click on that it will give you the details of the certificate and you want to click the "certificate information" link.
You want the "details tab and you should see the button to copy to file. Select that and an export wizard opens. Accept the defaults until it prompt you for a filename/location. For now pick a place you can find it and a name you can remember. Just call it by the website name with no extension and put it on your desktop. the wizard will append the ".cer" extension.
Once you've done that, you then have to copy the file to the root of your sd card which will be your internal storage.
On the phone go to menu>settings>security>credentials storage and choose install from sd card. Now here's a gotcha. The security policy will not let you install untrusted user certificates without first having a screen lock in place. Pattern, PIN or password. Once you set the password for the screen lock, your certificate installs and you're good to go.
Of course you now have a screen lock, so it might just be easier bypassing the warning instead of installing the certificate.