Strict Standards: Non-static method Settings::setHostName() should not be called statically in C:\website\www.networksteve.com\enterprise\_lib\AutoConfig.php on line 20

Strict Standards: Non-static method Settings::addHostAlias() should not be called statically in C:\website\www.networksteve.com\enterprise\_lib\AutoConfig.php on line 22

Strict Standards: Non-static method Settings::setSiteRoot() should not be called statically in C:\website\www.networksteve.com\enterprise\_lib\AutoConfig.php on line 28

Strict Standards: Non-static method Settings::setDsn() should not be called statically in C:\website\www.networksteve.com\enterprise\_site\Config.php on line 16

Strict Standards: Non-static method Settings::setTitle() should not be called statically in C:\website\www.networksteve.com\enterprise\_site\Config.php on line 19

Strict Standards: Non-static method Settings::setDescription() should not be called statically in C:\website\www.networksteve.com\enterprise\_site\Config.php on line 20

Strict Standards: Non-static method Settings::setSiteRoot() should not be called statically in C:\website\www.networksteve.com\enterprise\_site\Config.php on line 24

Strict Standards: Non-static method Settings::setShowDeleted() should not be called statically in C:\website\www.networksteve.com\enterprise\_site\Config.php on line 31

Strict Standards: Non-static method Settings::setRecentTopicsDuration() should not be called statically in C:\website\www.networksteve.com\enterprise\_site\Config.php on line 36

Strict Standards: Non-static method Settings::test() should not be called statically in C:\website\www.networksteve.com\enterprise\_lib\Init.php on line 28

Strict Standards: Non-static method Skin::test() should not be called statically in C:\website\www.networksteve.com\enterprise\_lib\Init.php on line 29

Strict Standards: Non-static method Settings::getSkin() should not be called statically in C:\website\www.networksteve.com\enterprise\_lib\Skin.php on line 102

Strict Standards: Non-static method Settings::getSiteRoot() should not be called statically in C:\website\www.networksteve.com\enterprise\_lib\Init.php on line 32

Strict Standards: Non-static method Settings::getDsn() should not be called statically in C:\website\www.networksteve.com\enterprise\_lib\Init.php on line 35

Strict Standards: Non-static method Form::field() should not be called statically in C:\website\www.networksteve.com\enterprise\_lib\Init.php on line 39

Strict Standards: Non-static method Form::fieldExists() should not be called statically, assuming $this from incompatible context in C:\website\www.networksteve.com\enterprise\_lib\Entity\User.php on line 92

Strict Standards: Non-static method Form::fieldExists() should not be called statically in C:\website\www.networksteve.com\enterprise\topic.php on line 15

Strict Standards: Non-static method Form::field() should not be called statically in C:\website\www.networksteve.com\enterprise\topic.php on line 17

Strict Standards: Non-static method Settings::getShowDeleted() should not be called statically, assuming $this from incompatible context in C:\website\www.networksteve.com\enterprise\_lib\Entity\Topic.php on line 139

Strict Standards: Non-static method Entity_Post::queryPosts() should not be called statically in C:\website\www.networksteve.com\enterprise\topic.php on line 21

Strict Standards: Non-static method Settings::getShowDeleted() should not be called statically in C:\website\www.networksteve.com\enterprise\_lib\Entity\Post.php on line 111

Strict Standards: Non-static method Skin::showHeader() should not be called statically in C:\website\www.networksteve.com\enterprise\topic.php on line 23

Strict Standards: Non-static method Skin::includeFile() should not be called statically in C:\website\www.networksteve.com\enterprise\_lib\Skin.php on line 46

Strict Standards: Non-static method Settings::getSkin() should not be called statically in C:\website\www.networksteve.com\enterprise\_lib\Skin.php on line 91
EMET 4 "EMET detected that the SSL certificate for "*.facebook.com" is not trusted..." (Network Steve Forum)
EMET 4 "EMET detected that the SSL certificate for "*.facebook.com" is not trusted..."

Starting today, I was getting a lot

- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="EMET" /> 
  <EventID Qualifiers="0">2</EventID> 
  <Level>2</Level> 
  <Task>0</Task> 
  <Keywords>0x80000000000000</Keywords> 
  <TimeCreated SystemTime="2013-12-31T01:49:12.000000000Z" /> 
  <EventRecordID>24027</EventRecordID> 
  <Channel>Application</Channel> 
  <Computer>nwt12.nwtraders.local</Computer> 
  <Security /> 
  </System>
- <EventData>
  <Data>EMET detected that the SSL certificate for "*.facebook.com" is not trusted by the rule "FacebookCA" associated with the domain "www.facebook.com" Certificates details: [SSL CERTIFICATE] SubjectName : CN=*.facebook.com, O="Facebook, Inc.", L=Palo Alto, S=California, C=US Issuer CA : CN=VeriSign Class 3 Secure Server CA - G3, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US SerialNumber : 3D4295F31ADC61C1B3B1C1853D850AB6 Thumbprint : 13D0376C2AB2143640A62D08BB71F5E9EF571361 SignatureAlg : sha1RSA NotAfter : 06/08/2015 01:59:59 NotBefore : 28/10/2013 01:00:00 PublicKey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ubjectName : CN=VeriSign Class 3 Public Primary Certification Authority - G5, OU="(c) 2006 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US Issuer CA : CN=VeriSign Class 3 Public Primary Certification Authority - G5, OU="(c) 2006 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US SerialNumber : 18DAD19E267DE8BB4A2158CDCC6B3B4A Thumbprint : 4EB6D578499B1CCF5F581EAD56BE3D9B6744A5E5 SignatureAlg : sha1RSA NotAfter : 17/07/2036 01:59:59 NotBefore : 08/11/2006 01:00:00 PublicKey : 3082010A0282010100AF240808297A359E600CAAE74B3B4EDC7CBC3C451CBB2BE0FE2902F95708A364851527F5F1ADC831895D22E82AAAA642B38FF8B955B7B1B74BB3FE8F7E0757ECEF43DB66621561CF600DA4D8DEF8E0C362083D5413EB49CA59548526E52B8F1B9FEBF5A191C23349D843636A524BD28FE870514DD189697BC770F6B3DC1274DB7B5D4B56D396BF1577A1B0F4A225F2AF1C926718E5F40604EF90B9E400E4DD3AB519FF02BAF43CEEE08BEB378BECF4D7ACF2F6F03DAFDD759133191D1C40CB7424192193D914FEAC2A52C78FD50449E48D6347883C6983CBFE47BD2B7E4FC595AE0E9DD4D143C06773E314087EE53F9F73B8330ACF5D3F3487968AEE53E825150203010001</Data> 
  </EventData>
  </Event>

Solution

Update from 4.0 to 4.1

or

(unconfirmed) adjust the rules as proposed by Tekmark here http://social.technet.microsoft.com/Forums/security/en-US/home?forum=emet

"The message is about the new Configure Certificate Trust - the FacebookCA rule is set to expire on 12/30/2013.

If you open up EMET 4.0, click on TRUST ( CONFIGURE CERTIFICATE TRUST) --> Click on the Pinning Rules Tab --> Under Rule Expiration for FacebookCA  you can change the rule to expire next month or later and the message will go away.  You can set it to when the YahooCA rule will expire on 3/13/2014 if you like and you won't receive the message anymore. 

Not sure if the default template rules will be updated automatically or if they need to be manually updated. The Certificate stuff is all new to Emet 4.0 and I have yet to read up on all the configuration settings, etc.

You might not be on facebook but many websites incorporate facebook logins and like buttons on them, thus is why you see the EMET message since the default template rule for FacebookCA expired today."


  • Changed type Duke73 Tuesday, December 31, 2013 2:33 AM Is not question, is fix
  • Edited by Duke73 Tuesday, December 31, 2013 2:35 AM typo
December 31st, 2013 2:32am


Strict Standards: Non-static method Settings::getRecentTopicsLimit() should not be called statically, assuming $this from incompatible context in C:\website\www.networksteve.com\enterprise\_lib\Entity\Topic.php on line 121

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics

Strict Standards: Non-static method Skin::showFooter() should not be called statically in C:\website\www.networksteve.com\enterprise\topic.php on line 119

Strict Standards: Non-static method Skin::includeFile() should not be called statically in C:\website\www.networksteve.com\enterprise\_lib\Skin.php on line 56

Strict Standards: Non-static method Settings::getSkin() should not be called statically in C:\website\www.networksteve.com\enterprise\_lib\Skin.php on line 91