Opera

Opera Mobile for Windows Mobile mistakenly declares certificates as ‘expired’

Products affected: Opera Mobile 8.6 for Windows Mobile Sharp W-ZERO3 / Willcom Opera Mobile 8.6 for Windows Mobile Sharp W-ZERO3[es] / Willcom

Security Severity: Low (No data exposed or attacks enabled, but error may be inconvenient for users visiting SSL sites. Additionally, users may be confused regarding the error dialog displayed by Opera.)

Problem description: When trying to connect on HTTPS or SSL to a secure web server, Opera displays the following error: "Server certificate has expired". The user can then accept the certificate and proceed, or cancel the connection. If the user accepts, the communication can proceed as normal with full security. However, it is hard for the user to differentiate between a Certificate that has expired and this situation.

Detailed technical explanation: Due to a problem in the certificate comparison code, all certificates are mistakenly reported as expired if the current date on the device is in the month of December.
The warning comes up on all secure sites, regardless of certificate details.

Solution: See the solution page (Japanese).

Report: japan-support@opera.com