SSL certificate error with Standalone on Mac

Running latest version (4.0.11) on Mac Mountain Lion.

I am trying to use our University's installation of owncloud to store my zotero attachments. The owncloud installation has a WebDAV over SSL interface. I have created a "zotero" folder under files in the cloud.

Our University uses a self-signed SSL certificate for all network traffic. I have this certificate stored for various applications (Mail, Calendar, Google Chrome etc.). I do not have or use Firefox on my machine (I mention this because of the tendency of some people to confuse Standalone usage with the use of the popular Firefox Zotero plugin). Every single application works perfectly as it should.

In Zotero Standalone Sync preferences, I entered owncloud.iitd.ac.in/owncloud/index.php/files as the URL (using https - http does work as WebDAV is over SSL only). When I enter username and password and click verify, I get an SSL error advising me to look into overriding certificates.

I have extensively searched these forums and elsewhere for a solution to this problem. No clear solution comes to the fore though there are plenty of complaints about it.

The following comment appears to hint that Standalone uses a browser request to load the certificates (the comment is by Dan Stillman, dated Jan 2012):

https://forums.zotero.org/discussion/20132/

I am using a newer version of Zotero than the one referenced in the post above. Is this showstopper class error still unfixed (seems a little incredible - https://www.zotero.org/trac/ticket/1765)?

The Knowledge Base workaround (http://www.zotero.org/support/kb/cert_override) presumes that user is using Firefox. I am not. Is there a corresponding Chrome hack?
  • Even if you don't want to use Firefox, you can install it just to generate cert_override.txt file as per instructions in the knowledgebase and then remove it. That would probably be the easiest way.
  • I wouldn't really call this "showstopper class". Adding proper GUI support for this (which let you view cert details, etc.) would probably require a fair bit of effort, there's a pretty simple workaround, and most people don't use self-signed certificates.

    It'd be great to have a GUI for this — probably by hooking up some of the Firefox code — but there are many more important things on our list. Patches welcome, of course.
    The following comment appears to hint that Standalone uses a browser request to load the certificates (the comment is by Dan Stillman, dated Jan 2012)
    That thread was from a beta period, but it turned out that the "Load WebDAV URL" button I mention there never actually worked in Standalone, because the UI to override certificates is in Firefox, not XULRunner. So now we just open the cert_override documentation. (The button to do that was apparently also broken, but I've now fixed it. Needless to say, this isn't a particularly heavily trafficked section of the code.)
    The Knowledge Base workaround (http://www.zotero.org/support/kb/cert_override) presumes that user is using Firefox. I am not.
    It doesn't really presume that. XULRunner, the Mozilla framework that Zotero Standalone uses, just requires the same certificate file format, so using Firefox is the way to generate such a file. (And everyone has access to Firefox, whether they use it or not.)
Sign In or Register to comment.