So, I'm labbing up a few new f5 boxes at work, and the initial configuration is done by the web interface.  I've been using the Epiphany browser on Debian.  Unfortunately, whenever I have to factory-default a box or use the same IP to connect to new box, (or any number of other common lab scenarios) the certificate serial number is reused or may go backwards.  So, Epiphany gives me the nice sec_error_reused_issuer_and_serial error and fails the SSL handshake.  Unfortunately, deleting the certs out of the certificate manager (Tools -> Manager Certificates) doesn't work.  The only way I've found to fix this is:

% rm ~/.gnome2/epiphany/mozilla/epiphany/cert8.db

This essentially starts the certificate cache/DB from scratch.  Not good, but the only option is to use another browser.

Hey developers, let's add a knob to just disable all the certificate checking for 'lab' and 'testing' work.  It's just really annoying for us IT folks trying to get work done!

New comments are currently disabled for this entry.