Coffeehouse Thread

7 posts

I got this pop-up this morning...

Back to Forum: Coffeehouse
  • User profile image
    Minh

    What does it mean?

    Generic Forum Image

  • User profile image
    GoddersUK

    That IE can't access the CA's list that will tell it whether or not the certificate's key has been revoked (e.g. because someone stole the private key or something).

    It's like if I give you a passport that seems genuine and you phone UK IPS up to check but can't get through to them.

  • User profile image
    Minh

    thanks GoddersUK... I looked at the process that the pop-up belongs to:

    jusched.exe / Java(TM) Update Scheduler / Sun Microsystems, Inc.

    So..... the scheduler is trying to access a site... but there's something wrong with the site's certificate?

  • User profile image
    GoddersUK

    Yeah, Java's phoning home to see if there's any updates available and getting that certificate. As I understand it (although there are people far more knowledgeable than me about this on c9), more than likely there's nothing actually wrong with the certificate itself, your computer just can't check with Comodo that they've not revoked the certificate.

  • User profile image
    figuerres

    , GoddersUK wrote

    Yeah, Java's phoning home to see if there's any updates available and getting that certificate. As I understand it (although there are people far more knowledgeable than me about this on c9), more than likely there's nothing actually wrong with the certificate itself, your computer just can't check with Comodo that they've not revoked the certificate.

    or another possible case might be that something put a bad update location on your system and the software is going to a bad site with a fake SSL cert that looks like it's from them but not and some bad folks are betting that a lot of folks will assume the cert is real, trust it and get more malware installed.

    I do not know if that is the case but .....   I would check to see if you can verify that the CA is not having a problem and does oracle / java use them for the certs and do they have any info about that problem happening to others.

    or just uninstall java and forget that stuff...

  • User profile image
    Minh

    Yeah, I don't even know why I had Java anymore... Still need it at work though

    And I'd assume that the UI is Window's... so the cert is legitimately issued to oracle... Probably safe?

  • User profile image
    kettch

    @Minh: Probably safe. The UI in the screenshot definitely belongs to Windows. Verifying certificates is something that normally happens silently and transparently to the calling application, except when there's an issue like this.

Comments closed

Comments have been closed since this content was published more than 30 days ago, but if you'd like to continue the conversation, please create a new thread in our Forums, or Contact Us and let us know.