noticeboard.ru.ac.za

2013/10/08 - New security (SSL) certificates
The security certificates on the following servers and services have just been updated:
  • dmuapps.ru.ac.za
  • eprints.ru.ac.za
  • imap.ru.ac.za [imapbe.ru.ac.za, imapbe2.ru.ac.za]
  • lists.ru.ac.za
  • login.ru.ac.za
  • mail.ru.ac.za
  • mx.ru.ac.za
  • raccoon.ru.ac.za [alt.mx.ru.ac.za, ext.ru.ac.za, crisis.ru.ac.za]
  • rt.ru.ac.za
  • systems.ru.ac.za
  • terminalfour.ru.ac.za
  • vhost.ru.ac.za [ross.ru.ac.za, www.ru.ac.za, et al]
  • vip.ru.ac.za
  • vpn.ru.ac.za
  • webmail.ru.ac.za
  • wpad.ru.ac.za

If you see certificate errors or similar problems when connecting to any of the above, please make sure your computer's clock is reasonably accurate (to within five minutes).

Accurate date & time is becoming increasingly important. It is good thing to check for a whole range of connection problems, from connecting to wireless to reading email and logging into ruconnected -- anything that relies on a secure connection.

You can avoid problems relating to time by configuring your computer to automatically synchronise its date & time with our time service. There's instructions for doing this at http://www.ru.ac.za/static/it/configs/NTP. In general you should be doing this, as South African NTP time servers are far more accurate and reliable than Windows' default (time.windows.com).
With the last update, DigiCert have updated their root certificate authority certificates. This may cause problems for people using out-of-date browsers. If you get an error saying that the certificate authority is not trusted, please update your browser to the latest version. (If you're using Internet Explorer on Windows or Safari on a Mac, you should make sure your computer is configured to automatically install operating system updates, and new root certificates are part of the normal OS updates).

If you cannot do this, you can resolve the problem by installing DigiCert's root CA certificates manually. This isn't ideal, but will work around situations where you cannot update your browser. You can get these certificates from https://www.digicert.com/digicert-root-certificates.htm (Rhodes' sites use the DigiCert High Assurance EV Root CA one, but you should install all three).
post.5532681