Startseite
Verfasst von SalmanMohammadi am So, 12/11/2016 - 11:13

Your Connection is not secure -- SSL error -- unknown issuer

Today I tried to access https://trisquel.info from Trisquel 7 which I have installed in a virtual machine (using QEMU/KVM) but I get the following error message[1] and cannot access the website using abrowser or Firefox (which I downloaded directry from the Mozilla website).

But I have no problem with accessing the website using Firefox (45.5.1) on Debian Testing.

[1]
OS: Trisquel 7
abrowser: 50.0.2
firefox: 50.0.2

error: unknown issuer

https://trisquel.info/

Peer’s Certificate issuer is not recognized.

HTTP Strict Transport Security: false
HTTP Public Key Pinning: false

david:
Do, 12/15/2016 - 09:05

I will no longer risk saying that it's fixed now (but it should) :). The www subdomain has been added to the certificate to avoid failing the SSL check just before the redirection. Still pending work on packages.trisquel.info

SalmanMohammadi:
Di, 12/13/2016 - 23:39

https://www.trisquel.info is not accessible.


www.trisquel.info uses an invalid security certificate.
The certificate is only valid for the following names:
devel.trisquel.info, listas.trisquel.info, packages.trisquel.info, trisquel.info
Error code: SSL_ERROR_BAD_CERT_DOMAIN

david:
Mo, 12/12/2016 - 21:03

The certificate was not properly covering the listas.trisquel.info subdomain, it is now. It will also work for packages.trisquel.info when we secure that service with ssl (it's by now still using standard http).

SalmanMohammadi:
Mo, 12/12/2016 - 14:09

I found that https://listas.trisquel.info is also not accessible but it is showing another error:


listas.trisquel.info uses an invalid security certificate.
The certificate is only valid for the following names:
devel.trisquel.info, packages.trisquel.info, trisquel.info
Error code: SSL_ERROR_BAD_CERT_DOMAIN

AnhangGröße
BGGwEus.png 60.42 KB
SalmanMohammadi:
Mo, 12/12/2016 - 13:34

It has been solved now. Thank you.

david:
Mo, 12/12/2016 - 12:35

We installed new certificates this weekend (the old one was about to expire) and I kind of flunked the set-up. It should be fixed now, both here and at https://devel.trisquel.info, where there was also a mistake.

SalmanMohammadi:
So, 12/11/2016 - 11:14

This is a screenshot.

AnhangGröße
cOUaGjZ.png 96.45 KB