Security warning at login - cannot create secure connection

War Resisters' International uses a security certificate signed by CaCert.org, a community based organisation. Not all systems do have the so-called "root certificate" from CaCert.org installed, which is needed to validate WRI's certificate. This can be solved by installing the root certificate.

  1. Install root certificate for Firefox or Mozilla
  2. Install root certificate for Windows
  3. Install root certificate for Mac OS X
    1. Safari & Apple Mail
    2. Internet Explorer


Install root certificate for Firefox or Mozilla

  1. install cacert.org root certificate
  2. You should then see a window which looks like this:

  1. Check all the Trust this CA to... check boxes.
  2. optional step: confirm the fingerprint of the certificate by clicking View. Find where is says MD5 and compare with this text.
    A6:1B:37:5E:39:0D:9C:36:54:EE:BD:20:31:46:1F:6B
    Alternately, you can view the cacert.org fingerprint page, which is signed with their gpg key.
  3. Click OK.


Install root certificate for Windows

These steps will install the CA Cert root certificate for Internet Explorer and Outlook. For Firefox, see above.

  1. install cacert.org root certificate
  2. The File Download window will appear:

  3. Click Open
  4. The Certificate window will appear:
  5. Click Install Certificate...
  6. This will open a window titled "Certificate Import Wizard"
    The defaults for the wizard are probably what you want, so hit Next > twice and then the Finish button.
  7. The Security Warning window will appear:
  8. optional step: confirm the thumbprint of the certificate. Find where it says "Thumbprint (sh1)" and compare the numbers listed there with this text:
    135CEC36 F49CB8E9 3B1AB270 CD808846 76CE8F33
    Alternately, you can view the cacert.org fingerprint page, which is signed with their gpg key.
  9. Click Yes
  10. If successful, you should see this window:


Install root certificate for Mac OS X


Safari & Apple Mail

These steps will install the CA Cert root certificate and make it available to Safari and Apple Mail.

download root.crt (cacert.org root certificate)

  1. Click the above link to download the file root.crt
  2. Double click on the file root.crt
  3. You should see a window like this:
  4. Choose X509 Anchors from the Keychain popup menu.
  5. Click OK. You will need to enter the password of the admin user.
  6. Now Safari and Apple Mail should work smoothly with encrypted connections with riseup.net.


Internet Explorer

To install the CA Cert root certificate for Internet Explorer on the Mac:

install root certificate using IE on the Mac.

NOTE: This link will only work for IE on the Mac. None of the other install links will work for IE on the Mac.

  1. Click the link above. You should then see a screen which looks like this:
  2. Click View Certificate Authority
  3. You will then see:
  4. Click both checkboxes and the Accept button.
  5. When it asks for a password, leave it empty and click OK.
  6. Continue to click OK and leave the password field blank until it goes away.
  7. When you are notified that the certificate has been added, click OK.