Chartdownloader Security Certificate

[rgleason]

I am getting a message which I have ignored, about the Chartdownloader security certificate being out of date. How would one update this certificate?
Reinstall Chartdownloader over the existing? No- I am using 4.6.2 so that's not the answer.

This may be a prompt from Norton or Windows defender.

[transmitterdan]

Rick,

Is this still happening? I do not get any message like this on latest O.

[hellosailor]

rg-
Are you sure that note isn't coming from your BROWSER? Warning you that the security certificate for that WEB SITE is invalid?
Typically you'd get a red background in the URL bar at the same time, depending on brower.
When some novice upgrades too many things on a web site and doesn't understand their security certificate must ALSO be updated...that can happen. Or it the site owner asks for the certificate to be cancelled, because they lost the password or their admin quit, that can happen.
Or when some malware host has taken over the web site or is impersonating it, and the web site has now been hijacked and may contain malicious code....
THAT'S when you don't want to connect to any web site that says "CERTIFICATE INVALID".
Call 'em up, send 'em an email, if they can't fix it within a week? Avoid it like the plague, it means they have no grasp on security and your computer is at risk.

[transmitterdan]

Hellosailor,

OpenCPN does not use a web browser.

[rgleason]

I believe it was after a parallel install of OpenCPN 4.6.2. What I did was "accept" the certificate, and it has not been a problem since. I did a search on the system and found "User Certificates" and did not find the opencpn certificate which is I believe for chartdownloader which I believes installs a certificate to enable downloading.

[rgleason]

No. I accepted the certificate one time so it will continue to accept it.
It occurred after install of v4.6.2 I believe, there was a prompt and question about the validity of the certificate. This may have occurred as a result of increased Norton Security updates, where they tighten up security with each major release. The certificate allows chartdwnldr to download safely with encryption and security, I believe.

Originally Posted by transmitterdan

Rick,

Is this still happening? I do not get any message like this on latest O.

[transmitterdan]

Originally Posted by rgleason

No. I accepted the certificate one time so it will continue to accept it.
It occurred after install of v4.6.2 I believe, there was a prompt and question about the validity of the certificate. This may have occurred as a result of increased Norton Security updates, where they tighten up security with each major release. The certificate allows chartdwnldr to download safely with encryption and security, I believe.

Rick,

Ok, this might have been a certificate downloaded from github as part of CURL's process. It is harmless to accept the cert.

We use security certificates whenever possible when downloading chart catalogs and the like. Normally this happens silently but probably you have some setting that requires approval before storing the certificate in the local store.

There is no web browser as part of OpenCPN. But we do use secure https protocols if they are available. Some sites (github.com?) now only accept a secure connection.

[rgleason]

Yes, and I just got another notice from Norton about the Opencpn certificate.
See attached for more explaination.

[rgleason]

Yes, and I just got another notice from Norton about the Opencpn certificate.
See attached for more explanation.

[transmitterdan]

Rick,

This is not an SSL certificate issue. This is a thing Microsoft has done to help prevent malicious software. It is ok to select the option to never notify you again. There isn't anything we can do unless we pay Microsoft some $$ for a digital signature. It may be impossible for open source software to get such a signature anyway.

[rgleason]

Sorry about the misinformation, it happened again on my SP3 so I took a snapshot. I'll just accept it. I am glad it is not the dwnldr certificate! Thanks for the info & suggestions.