Users have experienced problems when accessing SSL-encrypted pages on sites whose certification depended on VeriSign's own expired certificates.
The company said that older versions of its Intermediate Certificate Authority (CA) expired on 7 January. "As a result, users attempting to establish SSL session with sites that had not updated their CA certificates may start encountering error messages," said VeriSign in a statement. "There is no security danger, and users who ignore these error messages can successfully establish secure SSL connections. However, sites should update their CA certificates if they have not already done so, to avoid user confusion. No action is required on the part of end users."
VeriSign posted instructions on how to update certificates on its Web site.
Explaining the problem, VeriSign said that CA certificate expiration is a normal event that is considered best practice when issuing and managing certificates. "In anticipation of this expiration event, VeriSign changed to a new version of CA certificates in December of 2001. All SSL certificates issued by VeriSign since that date have been issued in conjunction with the newer CA certificates."
The company said that since 2001, it had taken steps to notify its customers of the situation and, with each communication, alert them to the expiration date and steps necessary to obtain a new Intermediate CA. However, some companies missed or ignored the warnings, resulting in error messages for users trying to access secure areas. VeriSign said it was taking additional actions to help those still experiencing difficulties. All employees in its client-services team have been made available to answer questions and walk customers through the process which, it said, will take only a short time and will not result in any disruption of service.
The issue is global, but UK customers can contact VeriSign's recently opened offices here, on 0800 032 2101 or by sending an e-mail to support@verisign.co.uk
Customers using VeriSign certificates have previously dealt with BT in the UK, but after setting up a UK presence at the end of 2003, VeriSign started to operate its certificate business directly. BT continues to issue VeriSign certificates for its hosting customers along with other services, said Francois Steiger, senior vice president for Europe, when speaking to ZDNet UK in December. Steiger said VeriSign issues 25 percent of SSL certificates in Western Europe, and has 370,000 digital certificates installed in the region.
Talkback
Hello All, not sure if verisign or Norton has caused my problem, but, my programs and broadband internet connection has slowed down, some programs will not open at all.
The only fix i can find, temporary as it is, is to Disable Auto protect then all is normal.
Trying to find a fix for the problem is very hard, as no one seems to know how to fix it on the forums i have placed my problem.
Seems that there are many who are experiencing the same or simalir, i have been tempted to throw Norton in the bin.
Anyone know of a fix?
The option in Advanced is already unticked.
Checked for publishers certificate revocation.
Thanks for any replies.
Started happening to me all of a sudden just today, 2004-03-29.
Searched the net and found the following post by TTY35:
http://www.talkroot.com/archive/topic/5158-1.html
Basically, you should fire up IE and
1) go to Internet Options | Content | Certificates | Intermediate Certification Authorities.
2) Order by Expiration date and delete the one marked 1/7/2004.
Worked for me, no more delays... let me know if it works or doesn't for you.