[CarelStarreveld]

You can adjust what certificates should be trusted (even the weaker ones) this is under settings and security. But by changing that you will open the next can of worms...

Posted via the CrackBerry App for Android

[awus]

Thank you greatly for this explanation!

I'm curious, then why this ONLY occurs on the Passport, Classic, and Z30, not the Z10 ... and I see this jumping on the same exact WiFi AP and SSID. which I'm confused about.

Actually I also have issues with websites using Let's encrypt certificates on my Z10 too.

Posted via CB10 on Z10

[_.-jido_.-]

I am so glad I visited this thread.

I installed the Let's Encrypt certificates, then I also had to install the IdenTrust TrustID root certificate (which I had to convert to .pem first )

Now plenty of websites are working again! Thanks!

[VeryBumpy]

How does one determine the specific Certificate that is causing a particular web site to be blocked on their phone?

[bb10adopter111]

I am so glad I visited this thread.

I installed the Let's Encrypt certificates, then I also had to install the IdenTrust TrustID root certificate (which I had to convert to .pem first )

Now plenty of websites are working again! Thanks!

Could you please provide some guidance or a link about how to do this is BB10? I think it would be helpful to many.

Actually, I found a native app in BlackBerry World that claims to do exactly that. It has great reviews, but I'm hesitant to install an app that grants root certificate authentication without better bona fides than user reviews!
Posted via CB10

[Vistaus]

Could you please provide some guidance or a link about how to do this is BB10? I think it would be helpful to many.

Actually, I found a native app in BlackBerry World that claims to do exactly that. It has great reviews, but I'm hesitant to install an app that grants root certificate authentication without better bona fides than user reviews!
Posted via CB10

If you're on 10.3.3 you don't even need that app 'cause the certificates are pre-installed on 10.3.3 (even if you updated OTA/Blitz).

Posted via CB10 using my amazing  Passport (OG Red) <3

[bb10adopter111]

Still on 10.3.2. I have always just waited for carrier OTA updates, and I was going to do the same this time, unless the carrier has decided not to release them. AT&T has not said that yet, as I'll wait another six months or so.

Posted via CB10

[onlybuggin]

I think Blackberry's true commitment is to Android going forward. Any commitment to BB10 is only to large enterprise clients and they are supporting those clients by moving to software based solutions for Android, IOS with BB10 conspicuously absent.

Posted via the CrackBerry App for Android

True. But a browser update is not out of the question. More and more I get warnings that my browser is outdated.

Posted via CB10

[Vistaus]

Still on 10.3.2. I have always just waited for carrier OTA updates, and I was going to do the same this time, unless the carrier has decided not to release them. AT&T has not said that yet, as I'll wait another six months or so.

Posted via CB10

In that case you do need to install the certificates yourself. You can use this app for that, I can guarantee you it's safe
http://appworld.blackberry.com/webst...ntent/59999147

Posted via CB10 using my amazing  Passport (OG Red)

[Rarefrith]

This is brilliant, sorted out my website issues without waiting around for 10.3.3

Posted via my BlackBerry Leap

[bb10adopter111]

In that case you do need to install the certificates yourself. You can use this app for that, I can guarantee you it's safe
http://appworld.blackberry.com/webst...ntent/59999147

Posted via CB10 using my amazing  Passport (OG Red)

Thank you. I found that recommended on Blackberry's support site. It is great, and someone at CB should feature it in an article. I bet there are tens (or hundreds) of thousands of users out there suffering with the certificates issue who are stuck on 10.3.2 who could benefit from a clear explanation and fix for this issue.

Obviously, upgrading to 10.3.3 via an autoloader is the best fix, but not everyone wants to take that step.

Posted via CB10

[RickTrout]

I used the app to solve the Let's Encrypt certificate issue and it worked perfectly. Nothing to fear, 10.3.3 or just the app if staying on 10.3.2. Good Luck.

Posted with my Z30 on CrackBerry 10

[cyberdoggie]

Encountered the error message on the Passport with BB 10.3.2 as well, for instance when trying to download files sent to me through wetransfer (https://...).
That seems cured after the BB 10.3.3 update. Touch wood.

[susanjen]

This was driving me insane with my Passport until I noticed it was all with shared links. I tried "open in a new tab" and every one of the blocked sites worked.

[Fleeting]

I was wondering about this, and why only my BlackBerry was blocking sites.

Posted via CB10 on BlackBerry Q10

[XxWile_E_CoyotexX]

I'm getting this issue on 10.3.3.2205. Quite a lot. Any ideas?

Via CB10 on my BlackBerry® Passport™ SQW100-4/10.3.3.2205

[VeryBumpy]

I'm getting this issue on 10.3.3.2205. Quite a lot. Any ideas?

I'd try wiping my phone and reinstall the OS fresh but instead of that headache I'll wait for my KEYone in 2 months instead.

[CrazyJo82]

I only get site blocked message when viewing a link from Facebook. However, when I use the "open in new tab" the website loads without problem...

Posted via CB10

[Vistaus]

I only get site blocked message when viewing a link from Facebook. However, when I use the "open in new tab" the website loads without problem...

Posted via CB10

My mum has the same problem on her Passport running 10.3.3.2163

Posted via CB10 using my amazing  Passport (OG Red)

[deadcowboy]

Fixed in 10.3.3 for me.

Posted via CB10

[XxWile_E_CoyotexX]

I only get site blocked message when viewing a link from Facebook. However, when I use the "open in new tab" the website loads without problem...

Posted via CB10

I will try that!

-via Crackberry® for Android® (6.0.1) from my Priv™ by BlackBerry®

[XxWile_E_CoyotexX]

Works!

Via CB10 on my BlackBerry® Passport™ SQW100-4/10.3.3.2205

[ghee2]

Downloaded Amazon Root CA 1, Starfield G2 from

https://www.amazontrust.com/repository/

Downloaded Let's Encrypt root and intermediate "active" certificates from

https://letsencrypt.org/certificates/

Importing in Settings - Security - Certificates requires a *.pem filename extension. This can be corrected in File Manager after a long tap on the file, choosing Properties, Rename (not editing the name in Properties).

A site using Let's Encrypt still did not open, so I figured I needed an extra "DST Root CA X3" linked to from the above page. Copying and pasting the PEM text, then attempting to import resulted in an infinite wait. I found a copy of the same "DST Root CA X3" in a random Github file, and saving it with "Save Page" and importing worked. I guess the original pem text missed the "begin certificate"/"end certificate" lines.

https://raw.githubusercontent.com/ki...%20CA%20X3.pem

[FeelAbused]

Subject-line self explanatory... Passport, OS 10.33, as of yesterday cannot use hotmail and outlook mail... Would there be an end to this spreading bb native browser abuse?

[FeelAbused]

I do not see an "open in new tab" option on the browser? As of yesterday hotmail and outlook mail are both blocked on my Passport 10.3.3 Insane...