Received: from magus.postgresql.org (magus.postgresql.org [87.238.57.229])
	by mail.postgresql.org (Postfix) with ESMTP id 5F65D18BA22E
	for <pgsql-www@postgresql.org>; Wed, 18 Apr 2012 14:49:45 -0300 (ADT)
Received: from cronos.madness.at ([2a02:16a8:dc41::10])
	by magus.postgresql.org with esmtp (Exim 4.72)
	(envelope-from <stefan@kaltenbrunner.cc>) id 1SKZ0X-00044X-KE
	for pgsql-www@postgresql.org; Wed, 18 Apr 2012 17:49:43 +0000
Received: from [2001:470:7a2d::22]
	by cronos.madness.at with esmtpsa (TLS1.0:RSA_AES_256_CBC_SHA1:32)
	(Exim 4.72) (envelope-from <stefan@kaltenbrunner.cc>)
	id 1SKZ0C-0000Wa-TE; Wed, 18 Apr 2012 19:49:18 +0200
Message-ID: <4F8EFE94.3050502@kaltenbrunner.cc>
Date: Wed, 18 Apr 2012 19:49:08 +0200
From: Stefan Kaltenbrunner <stefan@kaltenbrunner.cc>
User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US;
	rv:1.9.2.24) Gecko/20111120 Icedove/3.1.16
MIME-Version: 1.0
To: Bruce Momjian <bruce@momjian.us>
CC: Magnus Hagander <magnus@hagander.net>,
	PostgreSQL www <pgsql-www@postgresql.org>
Subject: Re: Commitfest website certificate
References: <20120418173042.GA6450@momjian.us>
	<CABUevEy7oED1_bOk1nMjCvv6A1haoNpfvd8uLOvCQXSYgN+DDw@mail.gmail.com>
	<20120418173915.GB6450@momjian.us>
In-Reply-To: <20120418173915.GB6450@momjian.us>
X-Enigmail-Version: 1.1.2
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
X-Pg-Spam-Score: -1.9 (-)
X-Archive-Number: 201204/39
X-Sequence-Number: 20613

On 04/18/2012 07:39 PM, Bruce Momjian wrote:
> On Wed, Apr 18, 2012 at 07:34:49PM +0200, Magnus Hagander wrote:
>> On Wed, Apr 18, 2012 at 19:30, Bruce Momjian <bruce@momjian.us> wrote:
>>> I am seeing an error connecting to:
>>>
>>>        https://commitfest.postgresql.org/
>>>
>>> Firefox is saying:
>>>
>>>        This Connection is Untrusted
>>>
>>>        You have asked Firefox to connect securely to commitfest.postgresql.org,
>>>        but we can't confirm that your connection is secure.
>>> _
>>> It started happening when I removed my Firefox preferences directory.
>>> Is this normal?  Does this site need an exception?
>>
>> It should not. Maybe someone is hacking your connection ;)
>>
>> It should be running with the same certificate as e.g.
>> www.postgresql.org, which is a wildcard cert for *.postgresql.org
>> valid until 2016. sha-256 fingerprint is:
>> 5D 19 8E 15 76 4F F4 0E 3E B0 0E B0 F4 2D 12 1B 93 CB 28 32 4D 39 5E
>> 8B DB 47 3D 2A 1B E9 54 35
> 
> Well, though I am not home, I have seen this failure from two different
> wireless networks.  Here are the technical details:
> 
> 	Technical Details
>         commitfest.postgresql.org uses an invalid security certificate.
> 	
> 	The certificate is not trusted because no issuer chain was provided.
> 	
> 	(Error code: sec_error_unknown_issuer)
> 
> This is with Firefox 11 on Ubuntu.  Does this help?

Just to test a theory - do you get the same error if you connect to
https://meldrar.postgresql.org?


Stefan