不受信任的连接

修订信息
  • 修订编号: 10032
  • 建立于
  • 创建者: rhel007
  • 备注:
  • 已审阅:
  • 已审阅:
  • 审核人: kmc
  • 已核准?
  • 这是当前最新的版本吗?
  • 可进行本地化:
修订原文
修订内容

84d36543f8c73c50c63238baf79bf4e3-1253375797-145-1.png

This article describes why the This Connection Is Untrusted error message may appear when trying to visit secure (https) websites in Firefox 3.5. 这篇文章描述了在你试图使用Firefox 3.5想要访问安全的(https)站点的时候为什么会出现"不信任的连接"这个错误的信息。

This article describes why the This Connection Is Untrusted error message may appear when trying to visit secure (https) websites in Firefox. 这篇文章描述了在你试图使用Firefox想要访问安全的(https)站点的时候为什么会出现"不信任的连接"这个错误的信息。


Certificates and identification

When you visit a website whose web address starts with https, your communication with the site is encrypted to help ensure your privacy. Before starting the encrypted communication, the website will present Firefox with a "certificate" to identify itself.

证书和认证

当你访问一个站点,它的网址是以https开头的,你和这个网站之间的信息交流就会被加密 来保护你的隐私权利。在启动这个加密的回话之前,这个站点就会在Firefox浏览器中呈现出一个"证书"来识别自己。 The certificate helps Firefox determine whether the site you're visiting is actually the site that it claims to be. If there is a problem with the certificate, you will see the This Connection Is Untrusted alert page. 这个证书可以帮助Firefox来确定这个你正在访问的站点是不是像它声称的那样实际的。如果这个证书有问题,你可以看看这个不信任的连接警告页。

84d36543f8c73c50c63238baf79bf4e3-1253375797-145-1.png::

Seeing the alert does not necessarily mean that the website you're visiting is trying to trick you into believing it is a different website - it means that Firefox isn't able to verify the identity of the website, and that you should proceed carefully. 看到这个警告不一定就意味着你正在访问的这个站点在试图欺骗你相信它是一个与众不同的站点-这意味着Firefox不能核实这个网站的身份,你需要对它进行小心的处理。 There are several problems that can cause Firefox to reject a certificate. Some of them are described in detail in the Technical information section below. 有几个问题能够引起Firefox拒绝接受证书,它们中的一些问题被详细的在Technical information 下面的部分描述。

Get out of there!

离开那里!

The safest thing to do is to click Get me out of here!, or to go to a different website. Unless you know and understand the technical reason why the website presented incorrect identification, and are willing to risk communicating over a connection that could be vulnerable to an eavesdropper, you should not proceed to the website. 最安全的做法是点击离开那儿!,或者去一个不同的站点,除非你了解明白为什么这个网站会呈现不正确识别的技术原因,而且你愿意冒险在这样的一个容易被窃听者攻击的连接上进行会话,你不应该和这个网站继续进行会话了。 If possible, you should contact the owners of the website and inform them of the error. 如果可能,你应该联系站长并告知他们这个错误。

Technical information

技术信息

Click on Technical Details for more information on why the website's identity information is invalid. Some common errors are described below. 在技术详情上点击获取更多关于为什么站点的识别信息是非法的信息。一些常见的错误会在下面被描述。

Certificate is only valid for (site name)

(site name) uses an invalid security certificate. The certificate is only valid for (site name). (Error code: ssl_error_bad_cert_domain)

证书仅对这样的(站点名称)是合法的

(站点名称)使用使用一个无效的安全证书,证书仅对这样的(站点名称)是合法的。(错误代码: ssl_error_bad_cert_domain)

This error is telling you that the identification sent to you by the site is actually for another site. While anything you send would be safe from eavesdroppers, the recipient may not be who you think it is. 这个错误是在告诉你这个网站已经发送给你的识别信息对于另外一个站点是真实可靠的。而你发送的任何信息都会被窃听者认为你安全的,这个信息的接受者可能不是你认为的那个接受者。 A common situation is when the certificate is actually for a different part of the same site. For example, you may have visited https://example.com, but the certificate is for https://www.example.com. In this case, if you access https://www.example.com directly, you should not receive the warning. 一种常见的情形是当证书对于同一个站点的不同部分被认为是真实的,比如,你可以访问https://example.com, 但是证书是对于https://www.example.com的。对于这种情况,如果你直接访问https://www.example.com。你就不会收到这个警告。

The certificate is not trusted because it is self-signed

不信任的证书因为证书已经被签署了

(site name) uses an invalid security certificate. The certificate is not trusted because it is self-signed.

(Error code: sec_error_untrusted_issuer) (站点名称)使用一个无效的安全证书,这个证书是不被信任的因为它已经被签署了。 (错误代码: sec_error_untrusted_issuer)

Self-signed certificates make your data safe from eavesdroppers, but say nothing about who the recipient of the data is. This is common for intranet websites that aren't available publicly. 已经被签署的证书窃听者可以是你的数据变为安全的,但是对于这个数据的接收者是谁没有说,这对于不公共开放的内部站点是很常见的。

Certificate will not be valid until (date)

(site name) uses an invalid security certificate. The certificate will not be valid until (date). (Error code: sec_error_expired_issuer_certificate)

证书不会是有效的直到(日期)

(site name) uses an invalid security certificate. The certificate will not be valid until (date). (Error code: sec_error_expired_issuer_certificate)

This error can occur if your computer clock has the wrong date. To fix the problem, set your system clock to the correct date and time.

The certificate expired on (date)

(站点名称) 使用了无效的安全证书,证书不会是有效的直到(日期)。 (错误代码: sec_error_expired_issuer_certificate)

如果你的电脑时钟有了错误的日期就会发生这个错误,要解决这个错误,设置你的系统时钟更正为正确的时间日期。 This error occurs when a website's identity certification has expired. 这个错误会在站点的识别证书过期的状况的发生。

This error can also occur if your computer clock has the wrong date. To fix the problem, set your system clock to the correct date and time. 这个错误也会发生在如果你的电脑时钟有了错误的日期,为了解决这个问题,设置你的系统时钟为正确的时间和日期。

Bypassing the warning

绕过警告

You should only bypass the warning if you're confident in both the identity of the website and the integrity of your connection - even if you trust the site, someone could be tampering with your connection. Legitimate public sites will not ask you to add connection rule exceptions - an invalid certificate can be an indication of a web page that will defraud you or steal your identity. 如果你确信这个站点的身份和连接的安全你只需要绕过这个警告就可以了-即使你相信这个站点,也有人会干涉你的连接,合法的公共站点将not要求你添加额外的连接规则-一个无效的证书可以成为欺骗和窃取你认证的网络手段。

  1. On the warning page, click I Understand the Risks.
  2. 在警告页上,点击我明白这个风险.
  3. Click Add Exception.... The Add Security Exception dialog will appear.

点击添加例外....添加安全例外的对话框就会出现。

  1. Read the text describing the problems with this site.

阅读站点问题描述的文本。

  1. Click Confirm Security Exception if you want to trust the site.

点击确认安全例外如果你信任这个站点