Home » Web » Problemi
Inviato da SalmanMohammadi il Dom, 12/11/2016 - 10:13

Your Connection is not secure -- SSL error -- unknown issuer

Progetto:Web
Componente:Main
Categoria:segnalazione di bug
Priorità:minor
Assigned:david
Stato:active
Descrizione

Today I tried to access https://trisquel.info from Trisquel 7 which I have installed in a virtual machine (using QEMU/KVM) but I get the following error message[1] and cannot access the website using abrowser or Firefox (which I downloaded directry from the Mozilla website).

But I have no problem with accessing the website using Firefox (45.5.1) on Debian Testing.

[1]
OS: Trisquel 7
abrowser: 50.0.2
firefox: 50.0.2

error: unknown issuer

https://trisquel.info/

Peer’s Certificate issuer is not recognized.

HTTP Strict Transport Security: false
HTTP Public Key Pinning: false

SalmanMohammadi:
Dom, 12/11/2016 - 10:14

This is a screenshot.

AllegatoDimensione
cOUaGjZ.png 96.45 KB
david:
Lun, 12/12/2016 - 11:35
Stato:active» fixed

We installed new certificates this weekend (the old one was about to expire) and I kind of flunked the set-up. It should be fixed now, both here and at https://devel.trisquel.info, where there was also a mistake.

SalmanMohammadi:
Lun, 12/12/2016 - 12:34

It has been solved now. Thank you.

SalmanMohammadi:
Lun, 12/12/2016 - 13:09
Stato:fixed» active

I found that https://listas.trisquel.info is also not accessible but it is showing another error:


listas.trisquel.info uses an invalid security certificate.
The certificate is only valid for the following names:
devel.trisquel.info, packages.trisquel.info, trisquel.info
Error code: SSL_ERROR_BAD_CERT_DOMAIN

AllegatoDimensione
BGGwEus.png 60.42 KB
david:
Lun, 12/12/2016 - 20:03
Priorità:blocking» minor
Assegnato a:anonymous» david
Stato:active» fixed

The certificate was not properly covering the listas.trisquel.info subdomain, it is now. It will also work for packages.trisquel.info when we secure that service with ssl (it's by now still using standard http).

SalmanMohammadi:
Mar, 12/13/2016 - 22:39
Stato:fixed» active

https://www.trisquel.info is not accessible.


www.trisquel.info uses an invalid security certificate.
The certificate is only valid for the following names:
devel.trisquel.info, listas.trisquel.info, packages.trisquel.info, trisquel.info
Error code: SSL_ERROR_BAD_CERT_DOMAIN

david:
Gio, 12/15/2016 - 08:05

I will no longer risk saying that it's fixed now (but it should) :). The www subdomain has been added to the certificate to avoid failing the SSL check just before the redirection. Still pending work on packages.trisquel.info