SSL cert error

[saliva]

Would somebody help/advise pleaz with the following SSL error that pops up every 10 minutes (& it's driving me up the wall) although I press "allow" ::

---- Certificate Errors ----
SSL Verify: [9:0] ok
Certificate's host name (CN) doesn't match the site's

---- Certificate Info ----
C=US
ST=California
L=San Francisco
O=ZoneLabs, Inc.
OU=Web services
CN=cm2.zonelabs.com/[email protected]

Begins: 2004-08-23 18:50 GMT
Expires: 2005-08-23 18:50 GMT

FYI: cert & proxcert are both created 12/4/04

I don't know why this error occurs, especially with ZoneLabs (aka ZoneAlarm) which I've been using for a number of years. (What's up with that?!) [unsure]

[sidki3003]

Newer implementations of the certificate specs allow variations of the commonName (CN) field.
The old spec just allowed "www.mysite.com" - period - and that is what Prox can handle.
Same thing happens with regexp'ed field values like...
"CN=(update|addons|addons.update|aus|pfs|iguana).mozilla.org"
...which was the problem in another thread.

Quick fix is to keep the Prox log window open until the next automatic connect appears and to add the site you'll see there (likely but not necessarily "cm2.zonelabs.com") to the general bypass list. Avoid the final slash after the hostname because port 443 can be part of the URL.

HTH,
sidki