I know I have insuffient certificates but... 2

[intrigrant]

Why does that *****ing UCM module rejects all browsers with a "untrusted certificate" error it is a 9.1.8nd yes it is installed per documentation.

 

[holdmusic34]

Because avaya don't pay the licensing authority for a generic SSL anymore. You're expected to do it yourself.
Don't bother using an sbc to generate a self signed for you. Those ones are crap
You can get around it with 'run anyway'.

Keeping your caffeine levels up also helps on a Monday mate.

Q: why are pirates so mean?
A Because they arrrrr.

 

[Westi]

holdmusic
It is Tuesday

Joe W.

FHandw, ACSS (SME)


"This is the end of the world, make sure to buy your T-shirt before it is too late"
Original expression of my daughter

 

[holdmusic34]

Shit i'm late for work!

Q: why are pirates so mean?
A Because they arrrrr.

 

[Westi]

I just left work 2.5 hrs ago and you start.

We know the world is save

Joe W.

FHandw, ACSS (SME)


"This is the end of the world, make sure to buy your T-shirt before it is too late"
Original expression of my daughter

 

[TheSmash]

Isn't it Wednesday now?

Back on topic. When are Avaya going to sort out this certificate nonsense. It's so unreliable.

ACSS (SME)

 

[critchey]

When are Avaya going to sort out this certificate nonsense. It's so unreliable.

That is Avaya in a nutshell, unreliable and/or nonsense. As for when it will be fixed, my guess is "working as intended" or never.

 

[amriddle01]

Certificates are just a way of people who you have no interest in dealing with (but are forced to) making recurring revenue off you, it's all nonsense really

 

[intrigrant]

I've sorted it out. more or less.
It is not all Avaya to blame, each browser has another way of dealing with certificates it seems.
FYI : I have removed all browsers from my PC and only use Mozilla Firefox.
Firefox just refuses to load the certificate provided by the UCM (Avaya documented how to import a certificate). period.
Now I imported the certificate through the Windows configuration panel > Internet settings and the same certificate is loaded AND used by Firefox.
Who is insane here?
I did not test any other browser as I like Firefox most and I just do not trust Google or Micro$oft when it comes to privacy (can I trust Firefox? Probably not but I trust them more as the others).
PS, a collegue use Google Chrome and had no problems with the certificate.

Damn what was I frustrated yesterday...

 

[tlpeter]

Did you get enough coffee Intrigrant?



BAZINGA!

I'm not insane, my mother had me tested!

 

[intrigrant]

It is never enough

 

[tlpeter]

When do you come by for some coffee at my office?
Paul asked for you lately.

BAZINGA!

I'm not insane, my mother had me tested!

 

[intrigrant]

Tommorrow after 15:00 maybe? I have a appointment in the hospital at 14:00, if it doesn't take too long i'll drive by.

 

[tlpeter]

I am not there on Fridays
Monday i am in again.


BAZINGA!

I'm not insane, my mother had me tested!

 

[amriddle01]

This is like listening to two old ladies at the bus stop....

 

[intrigrant]

Or two ex marines in a bar....

 

[amriddle01]

No, you don't sound that macho I'm afraid, that would involve beers

 

[IPGuru]

I am going to fully lay the blame at Firefox here

The took a decision to refuse completely unsigned certificates because of the number of dodgy websites using them*.
in the process they failed to take into consideration that many Network devices use such certificates & cannot be upgraded.

Whilst I appreciate their attempt to protect naive users, locking it down totally with no means to override is inconsiderate to say the least.
Chrome has moved down the same path put has at least kept an override available made the safe option the on that the "Just Click OK" users would select by default .

Perhaps letsencrypt.org can be used to resole the problem

*I think the full explanation may be a bit more complicated but it does not make much difference to the end result.




Do things on the cheap & it will cost you dear

 

[montyzummer]

I dont know if you guys use system manager but you can use that as a CA

ACSS (UC/SBCE/SM/SME)

Not that they mean a thing anymore , get a brain dump pass the test crash the system.

 

[janni78]

You could most thing as CA, IPO SE, Windows server or just install openssl and create the cert as long as you don't need a trusted certificate.

"Trying is the first step to failure..." - Homer