Cannot add security exception for government websites

Ever since my most recent update in Firefox 4.0.1, I am no longer able to "add exception" for government websites I normally visit. The "Untrusted Connection" screen appears as it has many times in the past and when I try to click "add exception" nothing happens. This happens on any website with an "Untrusted Connection".

If you install the DoD CA 2 root certificate and possibly the DOD CA-17 intermediate certificate then you do not need to add an exception.
*https://www.dodpke.com/InstallRoot/
*https://dod411.chamb.disa.mil/

Similar Messages

Exception: Unable to add security token for identity

Hi Friends,
I was trying to add SAML tokens(Sender-Voucher Profile) to my web services. I configured WLS and ALSB with all Authentication settings but I get a SOAPFaultException when i run the client.
javax.xml.rpc.soap.SOAPFaultException: Unable to add security token for identity
I tried the following samples:
https://codesamples.projects.dev2dev.bea.com/servlets/Scarab/remcurreport/true/template/ViewIssue.vm/id/S10/eventsubmit_dosetissueview/foo/resultpos/-1/nbrresults/0/action/ViewIssue/tab/2/readonly/false
https://codesamples.projects.dev2dev.bea.com/servlets/Scarab/remcurreport/true/template/ViewIssue.vm/id/S203/nbrresults/39
Is there any configuration on WLS that needs to be verified when we get this Exception "Unable to add security token for identity"??
Any help is appreciated in this regard.
Thanks,
Kiran

Hello Kiran,
Is this problem resolved?. I am facing the same problem when i was trying to call a service .
The exception i got is as follows:
(D-113003875) server (IBwlpAdminServer) Method (com.zurich.ep.global.produc
metadata.impl.ProductMetaDataServiceImpl.getAllProducts:234) ==> Host (D-113003
75) server (IBwlpAdminServer) Method (com.zurich.ep.service.delegate.AbstractEx
eptionHandler.logException:67)
om.zurich.ep.exception.ServiceFailureException: SOAPFaultException - FaultCode
{http://schemas.xmlsoap.org/soap/envelope/}Server] FaultString [Unable to add s
curity token for identity] FaultActor [null]No Detail; nested exception is:
javax.xml.rpc.soap.SOAPFaultException: Unable to add security token for
dentity
at com.zurich.ep.global.productmetadata.impl.ProductMetaDataServiceImpl.
etAllProducts(ProductMetaDataServiceImpl.java:234)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.
ava:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAcces
orImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:585)
at com.zurich.ep.service.delegate.ServiceDelegateProxy.invoke(ServiceDel
gateProxy.java:135)
at $Proxy62.getAllProducts(Unknown Source)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.
ava:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAcces
orImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:585)
at com.zurich.ep.service.delegate.ServiceAdapter.invoke(ServiceAdapter.j
va:97)
at $Proxy63.getAllProducts(Unknown Source)
at com.zurich.ep.global.productmetadata.v20090601.ProductMetaDataService
ortTypeImpl.getAllProducts(ProductMetaDataServicePortTypeImpl.java:119)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.
ava:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAcces
orImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:585)
at weblogic.wsee.component.pojo.JavaClassComponent.invoke(JavaClassCompo
ent.java:99)
at weblogic.wsee.ws.dispatch.server.ComponentHandler.handleRequest(Compo
entHandler.java:64)
at weblogic.wsee.handler.HandlerIterator.handleRequest(HandlerIterator.j
va:127)
at weblogic.wsee.ws.dispatch.server.ServerDispatcher.dispatch(ServerDisp
tcher.java:85)
at weblogic.wsee.ws.WsSkel.invoke(WsSkel.java:80)
at weblogic.wsee.server.servlet.SoapProcessor.handlePost(SoapProcessor.j
va:66)
at weblogic.wsee.server.servlet.SoapProcessor.process(SoapProcessor.java
44)
at weblogic.wsee.server.servlet.BaseWSServlet$AuthorizedInvoke.run(BaseW
Servlet.java:173)
at weblogic.wsee.server.servlet.BaseWSServlet.service(BaseWSServlet.java
92)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:856)
at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run
StubSecurityHelper.java:223)
at weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecuri
yHelper.java:125)
at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.jav
:283)
at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.jav
:175)
at weblogic.servlet.internal.WebAppServletContext$ServletInvocationActio
.run(WebAppServletContext.java:3245)
at weblogic.security.acl.internal.AuthenticatedSubject.doAs(Authenticate
Subject.java:321)
at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:
21)
at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppS
rvletContext.java:2003)
at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletC
ntext.java:1909)
at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.j
va:1359)
at weblogic.work.ExecuteThread.execute(ExecuteThread.java:209)
at weblogic.work.ExecuteThread.run(ExecuteThread.java:181)
aused by: java.rmi.RemoteException: SOAPFaultException - FaultCode [{http://sch
mas.xmlsoap.org/soap/envelope/}Server] FaultString [Unable to add security toke
for identity] FaultActor [null]No Detail; nested exception is:
javax.xml.rpc.soap.SOAPFaultException: Unable to add security token for
dentity
at com.zurich.ep.service.delegate.AbstractExceptionHandler.logException(
bstractExceptionHandler.java:67)
at com.zurich.ep.service.delegate.client.WebServiceBusinessDelegate.invo
e(WebServiceBusinessDelegate.java:260)
at $Proxy61.getProductFunctionality(Unknown Source)
at com.zurich.ep.global.productmetadata.impl.ProductMetaDataServiceImpl.
etAllProducts(ProductMetaDataServiceImpl.java:201)
... 39 more
aused by: javax.xml.rpc.soap.SOAPFaultException: Unable to add security token f
r identity
at weblogic.wsee.codec.soap11.SoapCodec.decodeFault(SoapCodec.java:265)
at weblogic.wsee.ws.dispatch.client.CodecHandler.decodeFault(CodecHandle
.java:106)
at weblogic.wsee.ws.dispatch.client.CodecHandler.decode(CodecHandler.jav
:91)
at weblogic.wsee.ws.dispatch.client.CodecHandler.handleFault(CodecHandle
.java:79)
at weblogic.wsee.handler.HandlerIterator.handleFault(HandlerIterator.jav
:254)
at weblogic.wsee.handler.HandlerIterator.handleResponse(HandlerIterator.
ava:224)
at weblogic.wsee.ws.dispatch.client.ClientDispatcher.handleResponse(Clie
tDispatcher.java:161)
at weblogic.wsee.ws.dispatch.client.ClientDispatcher.dispatch(ClientDisp
tcher.java:116)
at weblogic.wsee.ws.WsStub.invoke(WsStub.java:89)
at weblogic.wsee.jaxrpc.StubImpl._invoke(StubImpl.java:335)
at com.zurich.ep.global.chassisauthorisation.v20090601.ChassisAuthorisat
onServicePortType_Stub.getProductFunctionality(ChassisAuthorisationServicePortT
pe_Stub.java:145)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.
ava:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAcces
orImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:585)
at com.zurich.ep.service.delegate.client.WebServiceBusinessDelegate.invo
e(WebServiceBusinessDelegate.java:225)
... 41 more
aused by: weblogic.xml.crypto.wss.WSSecurityException: Unable to add security t
ken for identity
at weblogic.wsee.security.wss.SecurityPolicyDriver.processIdentity(Secur
tyPolicyDriver.java:175)
at weblogic.wsee.security.wss.SecurityPolicyDriver.processOutbound(Secur
tyPolicyDriver.java:73)
at weblogic.wsee.security.WssClientHandler.processOutbound(WssClientHand
er.java:69)
at weblogic.wsee.security.WssClientHandler.processRequest(WssClientHandl
r.java:53)
at weblogic.wsee.security.WssHandler.handleRequest(WssHandler.java:72)
at weblogic.wsee.handler.HandlerIterator.handleRequest(HandlerIterator.j
va:127)
at weblogic.wsee.handler.HandlerIterator.handleRequest(HandlerIterator.j
va:100)
at weblogic.wsee.ws.dispatch.client.ClientDispatcher.dispatch(ClientDisp
tcher.java:101)
... 49 more
Thanks,
JK

In Firefox 4.0 with a Server with a self signed certificate using IPv6 I can not add a "Security Exception" for this certificate.

In Firefox 4.0 I have a server ... it contains a self signed certificate. Using IPv6 I can not add a "Security Exception" for this certificate.
1. I log onto the server (using IPv6). I get the "Untrusted connection page" saying "This connection is Untrusted"
2. I click on "Add Exception.." under the "I understand the Risks" section.
3. The "Add Security Exception" dialog comes up. soon after the dialog comes up I get an additional "Alert" dialog saying
An exception occured during connection to xxxxxxxxx.
Peer's certificate issuer has been marked as not trusted by the User.
(Error code sec_error_untrusted_issuer).
Please note that this works in Firefox 3.6.16 (in IPv4 and IPv6). It also works in Firefox 4.0 in IPv4 only IPv6 has an issue. What's wrong?

Exactly the same problem, except I'm using FF v6 for Windows, not FF v4 as for the lead post. This is for a self-cert which IS trusted, although the error message says it isn't.

Once a security exception is confirmed, website will not load images.

I try to go to www.target.com and have problems loading some of their website for example. I have confirmed a security exception for https://www-secure.target.com/ (I suspect this is the reason I needed to confirm a security exception.) Firefox then allows me to load the website now that the exception is confirmed. However, once the page loads, no images and only basic text with links is visible. I have tried re-installing firefox. Removing cookies. Clearing history. I still receive the same error.
Please help!

It shouldn't be necessary to add an exception for www-secure.target.com
The New Guest link on the http://www.target.com works fine for me.
In can you use the secure https://www.target.com then try the http: version as this server doesn't seem to have the correct certificate installed.
You can open the Web Console (Firefox/Tools > Web Developer) and check on the Network tab if any content is blocked and has a file size 0 (zero).
You can reload web page(s) and bypass the cache to refresh possibly outdated or corrupted files.
*Hold down the Shift key and left-click the Reload button
*Press "Ctrl + F5" or press "Ctrl + Shift + R" (Windows,Linux)
*Press "Command + Shift + R" (Mac)
Note that you should be cautious when you get an 'untrusted' error message and that you should never create a permanent exception in cases like this without investigating the cause.
Best would be to remove this exception and tell us what is wrong with the certificate.
*Tools > Options > Advanced > Certificates/Encryption: View Certificates
Check out why the site is untrusted and click "Technical Details to expand this section.<br>If the certificate is not trusted because no issuer chain was provided (sec_error_unknown_issuer) then see if you can install this intermediate certificate from another source.
You can retrieve the certificate and check details like who issued certificates and expiration dates of certificates.
*Click the link at the bottom of the error page: "I Understand the Risks"
Let Firefox retrieve the certificate: "Add Exception" -> "Get Certificate".
*Click the "View..." button and inspect the certificate and check who is the issuer of the certificate.
You can see more Details like intermediate certificates that are used in the Details pane.
If <b>"I Understand the Risks"</b> is missing then this page may be opened in an (i)frame and in that case try the right-click context menu and use "This Frame: Open Frame in New Tab".
*Note that some firewalls monitor (secure) connections and that programs like Sendori or FiddlerRoot can intercept connections and send their own certificate instead of the website's certificate.
*Note that it is not recommended to add a permanent exception in cases like this, so only use it to inspect the certificate.

WS-Security and proxy service: Unable to add security token for identity

What the reason of "Unable to add security token for identity" fault in this situation (10.3.1):
I did simple "hello word" proxy service and tried to apply custom policy binding.
WS-Policy is next:
<wsp:Policy wsu:Id="WS-Policy-Siebel"
     xmlns:sp="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702"
     xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy"
     xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">
     <wssp:Identity
          xmlns:wssp="http://www.bea.com/wls90/security/policy">
          <wssp:SupportedTokens>
               <wssp:SecurityToken
                    TokenType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#UsernameToken">
                    <wssp:UsePassword
                         Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText" />
               </wssp:SecurityToken>
          </wssp:SupportedTokens>
     </wssp:Identity>
</wsp:Policy>
Process WS-Security is setted to "yes".
While debugging I see that all works fine - I can authenticate with defined credentials and breakpoints in proxy service flow works fine.
But at the end I get the fault:
Soap fault:
<env:Envelope xmlns:env="http://schemas.xmlsoap.org/soap/envelope/">
<env:Header/>
<env:Body>
<env:Fault>
<faultcode>env:Server</faultcode>
<faultstring>Unable to add security token for identity</faultstring>
</env:Fault>
</env:Body>
</env:Envelope>
In console:
<09.06.2010 17:39:18 MSD> <Error> <OSB Security> <BEA-387023> <An error ocurred during web service security inbound response processing [error-code: F
ault, message-id: 1721282272521583996--57dc4ccc.1291cc2282d.-7fab, proxy: OSB Project WS-Security/WSSecurityService, operation: NewOperation]
--- Error message:
<env:Envelope xmlns:env="http://schemas.xmlsoap.org/soap/envelope/"><env:Header/><env:Body><env:Fault><faultcode>env:Server</faultcode><faultstring>Un
able to add security token for identity</faultstring></env:Fault></env:Body></env:Envelope>
weblogic.xml.crypto.wss.WSSecurityException: Unable to add security token for identity
at weblogic.wsee.security.wss.SecurityPolicyDriver.processIdentity(SecurityPolicyDriver.java:175)
at weblogic.wsee.security.wss.SecurityPolicyDriver.processOutbound(SecurityPolicyDriver.java:73)
at weblogic.wsee.security.wss.SecurityPolicyDriver.processOutbound(SecurityPolicyDriver.java:64)
at weblogic.wsee.security.WssServerHandler.processOutbound(WssServerHandler.java:88)
at weblogic.wsee.security.WssServerHandler.processResponse(WssServerHandler.java:70)
Truncated. see log file for complete stacktrace
Incoming soap message is:
<soapenv:Envelope      xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/">
<soap:Header      xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/">
<wsse:Security      soap:mustUnderstand="1" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">
<wsse:UsernameToken      wsu:Id="unt_TNNp0cBwU7HyPKoq" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">
<wsse:Username>testuser</wsse:Username>
<wsse:Password      Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText">testuser</wsse:Password>
</wsse:UsernameToken>
</wsse:Security>
</soap:Header>
<soapenv:Body>
<wss:NewOperation      xmlns:wss="http://www.troika.ru/Enterprise/WSSecurityService/">
<in>string</in>
</wss:NewOperation>
</soapenv:Body>
</soapenv:Envelope>
Edited by: Andrey L. on Jun 9, 2010 5:55 PM

I thought you were getting that exception when accessing the proxy.
No. Authentification works fine. Proxy body works fine. But at the end of proxy appears the exception.
Sorry for my english - I tried to show this situation on image: http://imglink.ru/show-image.php?id=9c0e0c1719f00289faf11696c6703bc3
Are you getting this exception when routing to a business service which is configured for WS-Security ??
I don't use business service in this test project - only simple proxy service with all logic inside.
PS transformation in replace action is very simple too:
(:: pragma bea:global-element-parameter parameter="$newOperation1" element="ns0:NewOperation" location="WSSecurityService.wsdl" ::)
(:: pragma bea:global-element-return element="ns0:NewOperationResponse" location="WSSecurityService.wsdl" ::)
declare namespace ns0 = "http://www.troika.ru/Enterprise/WSSecurityService/";
declare namespace xf = "http://tempuri.org/OSB%20Project%20WS-Security/Hello/";
declare function xf:Hello($newOperation1 as element(ns0:NewOperation))
as element(ns0:NewOperationResponse) {
<ns0:NewOperationResponse>
<out>Hello, { data($newOperation1/in) }!</out>
</ns0:NewOperationResponse>
declare variable $newOperation1 as element(ns0:NewOperation) external;
xf:Hello($newOperation1)
Edited by: Andrey L. on Jun 10, 2010 12:21 PM

HOW DO I GET RID OF THIS MESSAGE - ADD SECURITY EXCEPTION you are about to over ride how Thunderbird identifies this site. Location pop.shaw.ca.110 no e-mail

I KEEP GETTING A BOX WITH THIS MESSAGE - ADD SECURITY EXCEPTION
you are about to over ride how Thunderbird identifies this site
LOCATION: pop.shaw.ca.110
then it asks for a security certificate
I DO NOT KNOW HOW TO FIX OR BETTER YET GET RID OF THIS MESSAGE

You're supposed to take a screenshot. The link has instructions about how to do that.
Then attach the resulting image to your post by using the 'Browse' button right above the 'Post Reply' button.

How do I delete Add Security Exceptions popup box

I changed the port for my gmail account which I read in Thunderbird in error and now get the popup Add Security Exception which states "You are about to override how Thunderbird identifies this site. I don't want to override this! just get rid of popup.

I've done the same thing, and can't pick up my email in Thunderbird without addressing the pop-up. How do I re-do everything and get Gmail into Thunderbird correctly? Thanks!

Events cannot have multiple exceptions for the same date

I just starting getting this message and could not sync to one of my Google calendars. I'm posting this for others who might get the same problem.
I didn't find the answer on these forums but did find it on this thread on Google:
http://www.google.com/support/forum/p/Calendar/thread?tid=241155f758d9e2a4&hl=en
Here's the important excerpt:
"I had a client, who just had this same issue, nothing to do with Google cals.
It was apparently, in my best guess, a corruption of the subscribed cal.
*I did a get info on the cal, copied the URL, deleted the cal, then re-subscribed to it by pasting in the URL, and now it's working fine*."

I've been having the same problem with my iCal calendars and the "Events cannot have multiple exceptions for the same date" error. Once it gets going, it uses up a lot of the CPU and resources. After reinstalling iCal, all my calendars were missing and I could not even resubscribe to them.
I took my MacBook Pro to the Apple Store, and they were able to solve the problem by moving some of the iCal files from their existing folders out to the desktop, and reopening the program. That got it working, however, now I'm having the same problem again. So back to square one. Anyone else having this issue and know the cause?
My setup is my MacBook Pro uses Entourage, use that calendar in my iCal. And I subscribe to two calendars my wife publishes on her Macbook. We're both using Snow Leopard.

Unable to add security token for identity

Hi all,
I am trying to implement a web service with username token authentication. I have defined the ws -policies in the wsdl, and checked the Process Security Header checkbox in the proxy configuration. But when I invoke the proxy through test console and pass the full soap envelope , I am getting an "Unable to add security token for identity" error
This is how the soap header looks from the request document part of the test console:
     <soap:Header>
     <wsse:Security>
     <wsse:UsernameToken>
     <wsse:Username>xxxxx</wsse:Username>
     <wsse:Password      Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText">yyyyyy</wsse:Password>
     </wsse:UsernameToken>
     </wsse:Security>
     </soap:Header>
     <soap:Body>
I have configured the user at alsb security configuration and added an acces policy stating that the proxy can be accessed only by user "xxxx"
Please help
-Atheek

Mostafa ,
This points to a misconfiguration of your security. Possible causes are:
* There is not a valid RSA key to sign the SAML token with.
* The SAML CredentialMapper is missing
* There is no Relying Party (rp) configured for SAML Credential Mapper that matches your producer
* The producer is using User Name Token and you have no configured the DefaultCredentialMapper to allow for UserNameToken.
Good Luck,
Nate
Edited by: user650654 on Sep 9, 2008 4:31 AM

How to cancel an exception for a website that might be a 'clone' of the genuine one?

I stupidly clicked to make an exception for a website, after Firefox put up a message about it not having the correct certificate/authentication and that the site may be imitating the genuine one. I can't find a way of cancelling this exception. (Perhaps it might be an idea to have this shown loud and clear when the exception is first made?). How do I cancel this exception - In 'Tools' menu there are all sorts of other exceptions which can be cancelled but not the one I need! Help!

Deauthorize all, then authorize the active computers.

HT1918 cannot input security code for credit card

cannot input security code for credit card update

Where are you doing this? Go to your account in the Apple store and re-enter (not just verify) all of your account information and be sure one click ordering is on and try again
LN

Invalid security certificate for all websites on Mac (sec_error_unknown_issuer)

Since connecting to my university network, a message in Firefox systematically keeps popping up for every website. I'm now using internet somewhere else - where I've been connected many times before without a problem - and firefox keeps annoyingly giving me this message.
This is the message: cs-700-main(...):443 uses an invalid security certificate. This certificate is not trusted because the issuer certificate is unknown. Sec_error_unknown_issuer.
Apparently the organization issuing the certificate is 'vernier networks, inc.'.
I am using a Macbook bought recently and didn't have any problems until I connected to my university network. I'm not really familiar with Macs, so I don't really know what to do at this point to fix this. Apparently, people have had this problem before but no one has been able to help them. Can anyone help? This is really frustrating and it means I have to turn to Safari or Google Chrome!!
Thanks

It is related to browser settings do,
Firefox -> Tools -> Advanced -> view certificates -> servers -> Add exceptions
and add the your url in that dialogue box.

Firefox continues to warn me that the web site I am using does not have a valid certificate, even after I have repeatedly created an exception for this website

The site is an https secure site that I normally visit with IE, however parts have become inaccessible to me on one particular computer that I use for an unknown reason...( Vista sp2)
I decided to try Firefox and it works well, except for the annoying reminder every time I try and log in to the website that its security certificate is invalid...

I would suggest running the network via a pc for the day.. pick either your Mac or win7 pc.. you will need to do a bit of fiddling.. even better would be to just borrow a router. Or buy one on a 7day return .. !! Beg borrow.. don't steal. Just get a router other than TC. it won't take long to determine if the TC is the issue.
IMO at 18months you are suffering failure of the TC power supply. early days but it is showing signs of delinquency. And will get worse. But another router will show it up.. if the PC has dual ethernet cards you can run ICS.. or same sort of thing on the imac to the wireless .. ie the PC or Mac becomes the router with direct connection to the cable modem. Then share internet from there.
Once you do that for a day or two, you will quickly be able to track down if the issue is cable service/modem or the TC as router.

Invalid security certificate for my website host-they say the problem is Apple Safari and use Firefox instead

For the past few days, I keep getting an invalid security certificate in Safari whenever I select Edit My Site from my website homepage (http://annaporterartist.com), or whenever I select anything requiring a secure log in from my website host main page (FASO.com). I have contacted technical support at my website host (fineartstudioonline.com) and they say that this has been an intermittently recurring problem in Safari for years and they recommend that I use Firefox instead. As proof of this they emailed a link to an Apple Support discussion, but it was for Mac OS X Lion v 10.7.4 and Safari 5.1, even though I told them I am using Mac OS X Mountain Lion v 10.8.2 and Safari 6.0.2. I do not get this error message anywhere else on the web using Safari. I did try Firefox and it seems to work fine, but I prefer Safari and I want to know why Safari is not working as it should be. I am concerned that there is a real security problem with my website host and I need someone to explain why I am getting this error message, what it means, and if it is, in fact, a known problem with Safari or is my website host corrupted? Really tired of technical support playing pass the buck or pretending the problem does not exist.
The specific error message is:
Their response to my inquiry and my reply is shown below:

Back up all data.
Launch the Keychain Access application in any of the following ways:
☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)
☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.
☞ Open LaunchPad. Click Utilities, then Keychain Access in the icon grid.
From the menu bar, select
Keychain Access ▹ Preferences ▹ Certificates
There are three menus in the window. What is selected in each of them?

I added a security exception for an untrusted connection and can't figure out how to remove the exception.

The site is not unsafe site, but it's not what I wanted to do! How do I get rid of the exception?
I've tried Tools --> Options, and then I've looked mostly in Security and Advanced
I located the Encription area under Advanced, which looked promising, but I can't figure out which certificate I need to revoke; none of the say anything helpful like "user-requested exception" or anything like that.
The exception should have been for either a currently offline site (local only right now), or for the site I was connecting to through an embedded You Tube link. I am not sure which site I added the exception for, though I think it was for YouTube (the site being connected to).

Click on the Layout button lower right and choose a Vertical lyout from the dropdown

Cannot add security exception for government websites

Similar Messages

Maybe you are looking for