|
|
| Line 1: |
Line 1: |
| − | Some of ECE's SSL-encrypted departmental and research group websites each have
| + | This page is obsolete. ECE no longer runs its own certificate authority, as of May 30, 2019. |
| − | server certificates which have been signed by the Department's Certficate
| |
| − | Authority (CA). Being self-signed, the Department's Root Certificate is not
| |
| − | recognized by any web browser, be it Mozilla Firefox, Internet Explorer or
| |
| − | other. Therefore, your web browser will warn you that it cannot the identity
| |
| − | of the webserver when when accessing these websites.
| |
| − | | |
| − | To avoid these warnings, you should add the ECE Department's Root Certificate
| |
| − | to your browser's list of trusted certificate authorities. After adding the
| |
| − | Root Certificate, you should no longer receive warnings about our server
| |
| − | certificates (until the ECE Root Certificate expires in May 2019).
| |
| − | | |
| − | To install the Root Certificate, please find application-specific instructions
| |
| − | below. Please note that you may need to delete the previously installed ECE
| |
| − | Certificate Authority certificate (aka Root Certificate) before installing the
| |
| − | new one. Instructions on managing certificate authorities is included below.
| |
| − | | |
| − | Please ensure that the certificate you retrieve has the following
| |
| − | fingerprint(s):
| |
| − | * SHA1 Fingerprint=4D:AF:E2:C2:CE:A4:52:E8:54:76:70:B1:C3:45:F1:42:C9:F7:E4:CA
| |
| − | * MD5 Fingerprint=8E:0B:D9:B7:0A:EF:BE:A2:3E:CE:27:D0:25:FD:7E:27
| |
| − | | |
| − | ===Internet Explorer, Safari, and Google Chrome on Windows===
| |
| − | To install the Root Certificate:
| |
| − | | |
| − | # Click here, [http://help.ece.ubc.ca/CA.ece.ubc.ca.crt CA.ece.ubc.ca.crt], to download the certificate.
| |
| − | # Open the downloaded certificate. If using Internet Explorer, click on the "Open" button in the dialog that appears. If using Safari, double-click the ''CA.ece.ubc.ca.crt'' file that is saved to your Desktop to open it. In Chrome, open the downloaded file through the status bar.
| |
| − | # In the "Details" tab, verify that the SHA1 thumbprint matches the one listed shown above.
| |
| − | # In the "General" tab, click on the 'Install Certificate...' button in the window that opens.
| |
| − | | |
| − | To manage already installed certificates (so that you can delete the old one,
| |
| − | if necessary):
| |
| − | | |
| − | # In the Windows Control Panel, select "Internet Options" to open the "Internet Options" dialog box. (In Internet Explorer, the "Internet Options" dialog box can also be accessed via the "Tools" menu.)
| |
| − | # Select the "Content" tab and click on the "Certificates..." button to open the "Certificates" dialog box.
| |
| − | # Select the "Trusted Root Certification Authorities" tab.
| |
| − | # Find the certificate you wish to manage / remove. Our certificate appears as "ECE Certificate Authority".
| |
| − | | |
| − | ===Mozilla Firefox===
| |
| − | | |
| − | To install the Root Certificate:
| |
| − | | |
| − | # Click here, [http://help.ece.ubc.ca/CA.ece.ubc.ca.crt CA.ece.ubc.ca.crt].
| |
| − | # On the dialog box that appears, check all three boxes:
| |
| − | ::* Trust this CA to identify web sites.
| |
| − | ::* Trust this CA to identify email users.
| |
| − | ::* Trust this CA to identify software developers.
| |
| − | # Click on the "View" button and verify the SHA1 and MD5 thumbprints with those above.
| |
| − | # Click the "OK" to install the certificate.
| |
| − | | |
| − | To manage already installed certificates (so that you can delete the old one,
| |
| − | if necessary):
| |
| − | | |
| − | # From the "Tools" menu, select "Options..." to open the "Options" dialog box.
| |
| − | # Click on the "Advanced" icon, then click on the "View Certificates" button to open the "Certificate Manager" dialog box.
| |
| − | # Select the "Authorities" tab.
| |
| − | # Find the certificate you wish to manage / delete. Our certificate appears under "University of British Columbia."
| |
| − | | |
| − | ===Safari and Mac OS X===
| |
| − | To install the Root Certificate:
| |
| − | | |
| − | # Click here, [http://help.ece.ubc.ca/CA.ece.ubc.ca.crt CA.ece.ubc.ca.crt], and download the file to your Desktop.
| |
| − | # Open the downloaded ''CA.ece.ubc.ca.crt'' file. The "Keychain Access" application will open and an "Add Certificates" dialog box will appear.
| |
| − | # Select "System" from the drop-down list in the import window to install it for all users on the machine, or "Login" from the drop-down list to install it only for the current user account. (In older versions of Mac OS X, select "X509 Anchors" instead.)
| |
| − | # Click on the "Add" (or "Install Certificate…") button.
| |
| − | | |
| − | To manage already installed certificates (so that you can delete the old one, if necessary):
| |
| − | | |
| − | # Open the "Keychain Access" application (usually found in ''/Applications/Utilities/'')
| |
| − | # Search for "ECE Certificate Authority". Select the certificate you want to manage or delete.
| |
| − | | |
| − | | |
| − | ===iOS (iPhone, iPad and iPod Touch)===
| |
| − | To install the Root Certificate:
| |
| − | | |
| − | # Open this page in Safari, and open this link, [http://help.ece.ubc.ca/CA.ece.ubc.ca.crt CA.ece.ubc.ca.crt]. You should then see an "Install Profile" screen.
| |
| − | # Tap "More Details", then select the certificate. Verify the correctness of the signature (7B 6B 18 EF AB 5E B8...) and key identifier (E6 D2 D9 0C 06...).
| |
| − | # Go back to the "Install Profile" screen and tap the "Install" button.
| |
| − | <gallery>
| |
| − | Image:RootCertIPhone1.jpg|Opening the certificate
| |
| − | Image:RootCertIPhone2.jpg|Verifying the certificate
| |
| − | </gallery>
| |
| − | | |
| − | To manage already installed certificates (so that you can delete the old one, if necessary):
| |
| − | | |
| − | # Open the "Settings" application
| |
| − | # Under ''General → Profiles'', select "ECE Certificate Authority".
| |
