1

Since a few weeks a pop-up window appears (sometimes) after start-up of my Ubuntu 16.4 system, see this picture: image of pop-up window entitled Untrusted certificate

The title in the window bar says: "Untrusted certificate". The 1st line in the window says: "Cannot safely/securely connect to ....". The company to which ...stackstorage.com belongs, says that it does not use this certificate, and that from their perspective everything is okay. They say that my system might be under MITM-attack. I have no idea what to do (and what the danger is). Please help!

(I do'nt use VPN, my ISP is Ziggo (Netherlands), according to my router the IP4 DNS Server is: 89.101.251.228 and 89.101.252.229)

Maarten Fokkinga
  • 91

2 Answers2

1

Checking the hostname on mxtoolbox and ssltools.digicert confirm its down the chain from Chunghwa...

one of its SANs is hntp1.hinet.net / 168.95.192.1dnslytitcs

small extract from 2009 (not mine)

The Hinet.net domain belongs to Chunghwa Telecom Co., Ltd. According to Spamhaus.org (very authoritative), Chungwa a/k/a Hinet is the #4 spammer service company in the world. Like most Asian phone companies, they take nationalistic pride in ignoring complaints from the West. (Mainland China and South Korea are equally imperious, and Viet Nam is even worse.) So lots of email systems in the West are blocking Hinet. It is not to make a political statement. We know Hinet does not care, and does not take protesters seriously. It is a simple mechanical defense against the ongoing spam attack by Hinet's spammers.

I advise you check certificate stores for each browser you have installed these are separate from where you would usually find certs in /etc/ssl/...

Wiper
  • 91
  • 7
0

Following @Wiper I deleted in Firefox>Preference>Privacy&Security>Certificates>View Certificates...>tab Authoroties the certificate authority ChuChunghwa Telecom Co., Ltd. (ePKI Root Certification Authority --- Builtin Object Token). Also I have reset to factory settings my modem/router, since internet connection in our house was broken several times a day.

These two together seemed sufficient: no problems anymore. (But now I've also done a fresh install of Ubuntu 20.04.)

Maarten Fokkinga
  • 91