I am using Ubuntu 16.04 LTS and I am experiencing expired certificate issues (mainly with Google sites). I have followed the steps (without error) in Problem with certificates and this does not resolve the issue. Obviously I am unable to connect to any Google site to obtain assistance there and would appreciate any help. I have attached a screen shot of the Untrusted Certificates appearing in Chrome. I am getting these errors in firefox on my ubuntu box and my windows machines. I have also taken a look at Fake UserTrust.com Certificates in Chrome? but there did not appear a resolution implied. Thank you in advance. Apologies for forgetting the attachment.
Your question is interesting and helpful!
My initial response cost me a few points but oh well. I'm learning valuable knowledge too.
You can update the installed certificates Authority (CA) certs as follows
You can verify if you are resolving to the right address by typing:
dig (or nslookup or ping) google.com whois the.address.dig.returns
A site with a bogus cert spoofing google will not have an IP address that is in google.com's assigned netblock.
If you can ping a DNS entry that resolves to a google-assigned IP your browser should be able to view pages at the same address.
To eliminate the browser as an issue, you can always try
If this fails, you'll know it's an ssl issue if the following works
You may have to install lynx with
sudo apt-get install lynx
You can look at a servers current ssl certificates with the command
openssl s_client -showcerts -servername google.com -connect google.com:443 |tee google.crt QUIT
You can view the certificate details with this command
openssl x509 -inform PEM -in google.crt -text -out certdata
For test purposes I wrote the cert file to my home directory.
If the above openssl s_client command doesn't work, you can at least check to see if the web site is blocking your access to it. You won't be able to do anything but if you get a "Connected to google.com" response for the following command you'll know that packet blocking is not in play.
telnet google.com 443
On the browser side (using Firefox in my example)
edit-> preferences-> certificates-> view certificates-> servers-> add exception
In the Location window type
Should return with a Valid certificate message.
View to look at the certificate
Thank you for the assistance. I have been able to gain a solution by taking a broader view. Given that the issue was affecting all devices behind my router I began examining here and found the culprit. I have a Draytek router which had recently been firmware update. The issue was that I was blocking a WED HD Google service, apparently under the updated firmware it block more than WEB HD. I will be following up with Draytek to obtain further clarification. For community benefit the following is the service block details:- Google Service 1.11.4865.2530 To block Gmail and Google Drive. If user has login, it can not be blocked.