Security Certificate Extravaganza

This issue has only started recently, well after I updated to the most recent version of Opera. (That being said, it may very well be the newest version of Opera. I haven't tried to uninstall it as of yet.)

Anyway, every website I go to via Opera (including the Opera website itself) my browser will begin to barrage me with torrents of certificate warnings. These notifications apply to everything from Google, Facebook, Opera, et cetera. Not only that, but once approving the certificate for "facebook.com", for example, it will then give me an additional five or six more notifications asking approval (or denial) of numerous other facebook servers. For instance: "static.facebook.com" (three of these), "s-static.ak.facebook.com" (few more of those), and all other variations of said Facebook servers.

As I stated previously, this is not limited to just Facebook. If I visit a webpage hosting Google analytics I have to wade through multitudes of verifications for Google servers as well.

This is becoming extremely annoying. Actually, scratch that; it irritated me after clicking "Accept" about twenty times now.

I've tried going into the preferences in an attempt to find anything under "security" that would allow me add rules regarding certificates, albeit, to no avail.

Any assistance with this would be greatly appreciated. Specs are as follows:

Version: 11.51 (1087)
Win32

As you are not saying what the dialogs warn about (see the details panel) it is a little difficult to tell what is going on.

However, if it is "servername mismatch" then it is very likely that something is between you and the servers. OTOH, if it is "expired" then you need to check your system time.

I'm very certain that this isn't anything to do with my internet connection, or server communication issues. For lack of my technical knowledge, here are two screenshots of the problem at hand:

http://bayimg.com/hAKbDaAdh

http://bayimg.com/HakbnAADh

Please take into note the latter of the two links. I tried to spread them all out among the page in order to take a screenshot, but I could only get three before the notifications would re-align back to the middle of the page. As I said previously, when I browse Facebook I get barraged with these. Most of them are merely the same server names.

Looks like your Root certificate repository may have gotten so corrupted it can't be recovered automatically. (Perhaps caused by a crash or a full disk)

I suggest that you locate the Opera profile folder (see opera:about ), and open it in the file explorer, then shut down Opera. After Opera is shut down, rename or delete the file opcacrt6.dat, then restart Opera. The file will then be regenerated.

Originally posted by yngve:

After Opera is shut down, rename or delete the file opcacrt6.dat, then restart Opera. The file will then be regenerated.

I have done it because i have the same problem with app.tabpress.com certificate from opendns (i don't understand why).
I have done what you suggest but the problem persist.

Ciao, Igor

igorditerni: Don't assume that one particular suggestion automatically apply to your problem. Please note that CajunCody had a warning about "Unknown issuer" for certificates that actually chain to Roots in Opera, which is the only case that the opcacrt6.dat workaround works for, assuming his connection is not under a MITM attack using selfsigned certificates.

In your case the problem might be, and probably is, something completely different.

In any case, since you did not provide a working URL, or which message was displayed to you (step by step instructions, please), I cannot comment on what might be the issue (but check the system clock date, just in case)

This is my situation and appear apparently random...



Ciao, Igor

igorditerni: Are you by any chance using OpenDNS?

Apparently OpenDNS will respond to all unknown hostnames with the IP address of a OpenDNS server hosting a search page. What this means is that when you try to connect to a secure host, or at least domain, that does not exist (no IP address) you will not get a "could not locate host" error message, but is instead being connected to the secure version of a "hi, the domain you are looking for does not exist, do you want to search for it?" page. Unfortunately, that secure server cannot present a certificate for the hostname you tried to connect to, but instead one for "*.opendns.com", so the name does not matches and a certificate warning is displayed.

As Opera also display certificate warnings for inline resources, and not just the main page, you will see this if the page you are viewing include a URL to a site that does not exists, when you are using OpenDNS.

So, as long as you are using OpenDNS you will probably continue to get those warnings, although a quick search did indicate that there may be ways to disable the functionality, although it may be possible to block those unknown sites, too.

I don't use OpenDNS, i browse the web normally, using Opera with default settings.
Sometimes i am in chat and that warning appear and then disappear without my interaction; in other cases when i search something with Google...

Ciao, Igor

P.S.: In the screen shot i was translating a text with Google.

Well, to me it looks like you are probably on a computer, or a network (router, firewall, ISP), configured to use OpenDNS (Opera uses the Operating System DNS service, there is no configuration in Opera to override that), at least. I doubt you would get that kind of name association if you weren't on such a system.

What is the purpose of OpenDNS and how can i delete it to get a normal working connection?

Ciao, Igor

Opendns is a domain name server, which tells your computer the (ip) address of a site so it can be found. Basically speaking.

To use anothe dns server you need to change your router or network settings.

OpenDNS is a DNS lookup source that buypasses your ISP's or network's default DNS service (DNS provides the addresses for all websites you are visiting), for example it provides filtering against a number of "bad" sites.

See http://en.wikipedia.org/wiki/Opendns for more information.

It may have been installed as a software client on your computer, or it may be used by your ISP or home router (e.g. it appears that some Netgear home routers have a parental controls feature using it).

If it is on your network, and not your computer, then you need to configure your computer's DNS settings in the network configuration to use a different DNS server than the one provided by your network. Please note that updating these settings require care, as you may effectively disconnect your computer from the net by accident, and should only be done if you know what your are doing.

You may need to contact your ISP or system administrator to discover if it is used on your network and how to get out of it.

My network is a Tim internet wifi key. Is possible it is the problem?
And why in the past versions never happened?

Ciao, Igor

Originally posted by igorditerni:

My network is a Tim internet wifi key. Is possible it is the problem?

I have absolutely no idea. You will have to contact your network provider.

Originally posted by igorditerni:

And why in the past versions never happened?

That you have not seen something before in older Opera version does not mean that it was introduced by a newer version (Opera have been having that kind of certificate warnings since SSL was introduced in Opera v3.0). Instead, maybe something changed in the network configuration, such as the administrator adding OpenDNS? Again, you need to contact your network provider for more information.