public inbox for [email protected]
help / color / mirror / Atom feedCommitfest website certificate
12+ messages / 3 participants
[nested] [flat]
* Commitfest website certificate
@ 2012-04-18 17:30 Bruce Momjian <[email protected]>
0 siblings, 1 reply; 12+ messages in thread
From: Bruce Momjian @ 2012-04-18 17:30 UTC (permalink / raw)
To: pgsql-www
I am seeing an error connecting to:
https://commitfest.postgresql.org/
Firefox is saying:
This Connection is Untrusted
You have asked Firefox to connect securely to commitfest.postgresql.org,
but we can't confirm that your connection is secure.
_
It started happening when I removed my Firefox preferences directory.
Is this normal? Does this site need an exception?
--
Bruce Momjian <[email protected]> http://momjian.us
EnterpriseDB http://enterprisedb.com
+ It's impossible for everything to be true. +
^ permalink raw reply [nested|flat] 12+ messages in thread
* Re: Commitfest website certificate
@ 2012-04-18 17:34 Magnus Hagander <[email protected]>
parent: Bruce Momjian <[email protected]>
0 siblings, 1 reply; 12+ messages in thread
From: Magnus Hagander @ 2012-04-18 17:34 UTC (permalink / raw)
To: Bruce Momjian <[email protected]>; +Cc: pgsql-www
On Wed, Apr 18, 2012 at 19:30, Bruce Momjian <[email protected]> wrote:
> I am seeing an error connecting to:
>
> https://commitfest.postgresql.org/
>
> Firefox is saying:
>
> This Connection is Untrusted
>
> You have asked Firefox to connect securely to commitfest.postgresql.org,
> but we can't confirm that your connection is secure.
> _
> It started happening when I removed my Firefox preferences directory.
> Is this normal? Does this site need an exception?
It should not. Maybe someone is hacking your connection ;)
It should be running with the same certificate as e.g.
www.postgresql.org, which is a wildcard cert for *.postgresql.org
valid until 2016. sha-256 fingerprint is:
5D 19 8E 15 76 4F F4 0E 3E B0 0E B0 F4 2D 12 1B 93 CB 28 32 4D 39 5E
8B DB 47 3D 2A 1B E9 54 35
--
Magnus Hagander
Me: http://www.hagander.net/
Work: http://www.redpill-linpro.com/
^ permalink raw reply [nested|flat] 12+ messages in thread
* Re: Commitfest website certificate
@ 2012-04-18 17:39 Bruce Momjian <[email protected]>
parent: Magnus Hagander <[email protected]>
0 siblings, 1 reply; 12+ messages in thread
From: Bruce Momjian @ 2012-04-18 17:39 UTC (permalink / raw)
To: Magnus Hagander <[email protected]>; +Cc: pgsql-www
On Wed, Apr 18, 2012 at 07:34:49PM +0200, Magnus Hagander wrote:
> On Wed, Apr 18, 2012 at 19:30, Bruce Momjian <[email protected]> wrote:
> > I am seeing an error connecting to:
> >
> > https://commitfest.postgresql.org/
> >
> > Firefox is saying:
> >
> > This Connection is Untrusted
> >
> > You have asked Firefox to connect securely to commitfest.postgresql.org,
> > but we can't confirm that your connection is secure.
> > _
> > It started happening when I removed my Firefox preferences directory.
> > Is this normal? Does this site need an exception?
>
> It should not. Maybe someone is hacking your connection ;)
>
> It should be running with the same certificate as e.g.
> www.postgresql.org, which is a wildcard cert for *.postgresql.org
> valid until 2016. sha-256 fingerprint is:
> 5D 19 8E 15 76 4F F4 0E 3E B0 0E B0 F4 2D 12 1B 93 CB 28 32 4D 39 5E
> 8B DB 47 3D 2A 1B E9 54 35
Well, though I am not home, I have seen this failure from two different
wireless networks. Here are the technical details:
Technical Details
commitfest.postgresql.org uses an invalid security certificate.
The certificate is not trusted because no issuer chain was provided.
(Error code: sec_error_unknown_issuer)
This is with Firefox 11 on Ubuntu. Does this help?
--
Bruce Momjian <[email protected]> http://momjian.us
EnterpriseDB http://enterprisedb.com
+ It's impossible for everything to be true. +
^ permalink raw reply [nested|flat] 12+ messages in thread
* Re: Commitfest website certificate
@ 2012-04-18 17:49 Stefan Kaltenbrunner <[email protected]>
parent: Bruce Momjian <[email protected]>
0 siblings, 1 reply; 12+ messages in thread
From: Stefan Kaltenbrunner @ 2012-04-18 17:49 UTC (permalink / raw)
To: Bruce Momjian <[email protected]>; +Cc: Magnus Hagander <[email protected]>; pgsql-www
On 04/18/2012 07:39 PM, Bruce Momjian wrote:
> On Wed, Apr 18, 2012 at 07:34:49PM +0200, Magnus Hagander wrote:
>> On Wed, Apr 18, 2012 at 19:30, Bruce Momjian <[email protected]> wrote:
>>> I am seeing an error connecting to:
>>>
>>> https://commitfest.postgresql.org/
>>>
>>> Firefox is saying:
>>>
>>> This Connection is Untrusted
>>>
>>> You have asked Firefox to connect securely to commitfest.postgresql.org,
>>> but we can't confirm that your connection is secure.
>>> _
>>> It started happening when I removed my Firefox preferences directory.
>>> Is this normal? Does this site need an exception?
>>
>> It should not. Maybe someone is hacking your connection ;)
>>
>> It should be running with the same certificate as e.g.
>> www.postgresql.org, which is a wildcard cert for *.postgresql.org
>> valid until 2016. sha-256 fingerprint is:
>> 5D 19 8E 15 76 4F F4 0E 3E B0 0E B0 F4 2D 12 1B 93 CB 28 32 4D 39 5E
>> 8B DB 47 3D 2A 1B E9 54 35
>
> Well, though I am not home, I have seen this failure from two different
> wireless networks. Here are the technical details:
>
> Technical Details
> commitfest.postgresql.org uses an invalid security certificate.
>
> The certificate is not trusted because no issuer chain was provided.
>
> (Error code: sec_error_unknown_issuer)
>
> This is with Firefox 11 on Ubuntu. Does this help?
Just to test a theory - do you get the same error if you connect to
https://meldrar.postgresql.org?
Stefan
^ permalink raw reply [nested|flat] 12+ messages in thread
* Re: Commitfest website certificate
@ 2012-04-18 17:52 Bruce Momjian <[email protected]>
parent: Stefan Kaltenbrunner <[email protected]>
0 siblings, 1 reply; 12+ messages in thread
From: Bruce Momjian @ 2012-04-18 17:52 UTC (permalink / raw)
To: Stefan Kaltenbrunner <[email protected]>; +Cc: Magnus Hagander <[email protected]>; pgsql-www
On Wed, Apr 18, 2012 at 07:49:08PM +0200, Stefan Kaltenbrunner wrote:
> On 04/18/2012 07:39 PM, Bruce Momjian wrote:
> > On Wed, Apr 18, 2012 at 07:34:49PM +0200, Magnus Hagander wrote:
> >> On Wed, Apr 18, 2012 at 19:30, Bruce Momjian <[email protected]> wrote:
> >>> I am seeing an error connecting to:
> >>>
> >>> https://commitfest.postgresql.org/
> >>>
> >>> Firefox is saying:
> >>>
> >>> This Connection is Untrusted
> >>>
> >>> You have asked Firefox to connect securely to commitfest.postgresql.org,
> >>> but we can't confirm that your connection is secure.
> >>> _
> >>> It started happening when I removed my Firefox preferences directory.
> >>> Is this normal? Does this site need an exception?
> >>
> >> It should not. Maybe someone is hacking your connection ;)
> >>
> >> It should be running with the same certificate as e.g.
> >> www.postgresql.org, which is a wildcard cert for *.postgresql.org
> >> valid until 2016. sha-256 fingerprint is:
> >> 5D 19 8E 15 76 4F F4 0E 3E B0 0E B0 F4 2D 12 1B 93 CB 28 32 4D 39 5E
> >> 8B DB 47 3D 2A 1B E9 54 35
> >
> > Well, though I am not home, I have seen this failure from two different
> > wireless networks. Here are the technical details:
> >
> > Technical Details
> > commitfest.postgresql.org uses an invalid security certificate.
> >
> > The certificate is not trusted because no issuer chain was provided.
> >
> > (Error code: sec_error_unknown_issuer)
> >
> > This is with Firefox 11 on Ubuntu. Does this help?
>
> Just to test a theory - do you get the same error if you connect to
> https://meldrar.postgresql.org?
Yes. Technical details are the same too:
Technical Details
meldrar.postgresql.org uses an invalid security certificate.
The certificate is not trusted because no issuer chain was provided.
(Error code: sec_error_unknown_issuer)
--
Bruce Momjian <[email protected]> http://momjian.us
EnterpriseDB http://enterprisedb.com
+ It's impossible for everything to be true. +
^ permalink raw reply [nested|flat] 12+ messages in thread
* Re: Commitfest website certificate
@ 2012-04-18 17:58 Bruce Momjian <[email protected]>
parent: Bruce Momjian <[email protected]>
0 siblings, 1 reply; 12+ messages in thread
From: Bruce Momjian @ 2012-04-18 17:58 UTC (permalink / raw)
To: Stefan Kaltenbrunner <[email protected]>; +Cc: Magnus Hagander <[email protected]>; pgsql-www
On Wed, Apr 18, 2012 at 01:52:27PM -0400, Bruce Momjian wrote:
> > Just to test a theory - do you get the same error if you connect to
> > https://meldrar.postgresql.org?
>
> Yes. Technical details are the same too:
>
> Technical Details
> meldrar.postgresql.org uses an invalid security certificate.
>
> The certificate is not trusted because no issuer chain was provided.
>
> (Error code: sec_error_unknown_issuer)
Here is someone having a similar error on Firefox 11:
http://support.mozilla.org/en-US/questions/923163
--
Bruce Momjian <[email protected]> http://momjian.us
EnterpriseDB http://enterprisedb.com
+ It's impossible for everything to be true. +
^ permalink raw reply [nested|flat] 12+ messages in thread
* Re: Commitfest website certificate
@ 2012-04-18 18:18 Stefan Kaltenbrunner <[email protected]>
parent: Bruce Momjian <[email protected]>
0 siblings, 2 replies; 12+ messages in thread
From: Stefan Kaltenbrunner @ 2012-04-18 18:18 UTC (permalink / raw)
To: Bruce Momjian <[email protected]>; +Cc: Magnus Hagander <[email protected]>; pgsql-www
On 04/18/2012 07:58 PM, Bruce Momjian wrote:
> On Wed, Apr 18, 2012 at 01:52:27PM -0400, Bruce Momjian wrote:
>>> Just to test a theory - do you get the same error if you connect to
>>> https://meldrar.postgresql.org?
>>
>> Yes. Technical details are the same too:
>>
>> Technical Details
>> meldrar.postgresql.org uses an invalid security certificate.
>>
>> The certificate is not trusted because no issuer chain was provided.
>>
>> (Error code: sec_error_unknown_issuer)
>
> Here is someone having a similar error on Firefox 11:
>
> http://support.mozilla.org/en-US/questions/923163
yeah if you are NOT getting the error on https://www.postgresql.org we
have identified the issue(it is affecting most of our ssl enabled sites
running lighttpd) as some sort of viral(...) copy&paste fail - will be
fixed soon...
Stefan
^ permalink raw reply [nested|flat] 12+ messages in thread
* Re: Commitfest website certificate
@ 2012-04-18 18:53 Bruce Momjian <[email protected]>
parent: Stefan Kaltenbrunner <[email protected]>
1 sibling, 1 reply; 12+ messages in thread
From: Bruce Momjian @ 2012-04-18 18:53 UTC (permalink / raw)
To: Stefan Kaltenbrunner <[email protected]>; +Cc: Magnus Hagander <[email protected]>; pgsql-www
On Wed, Apr 18, 2012 at 08:18:04PM +0200, Stefan Kaltenbrunner wrote:
> On 04/18/2012 07:58 PM, Bruce Momjian wrote:
> > On Wed, Apr 18, 2012 at 01:52:27PM -0400, Bruce Momjian wrote:
> >>> Just to test a theory - do you get the same error if you connect to
> >>> https://meldrar.postgresql.org?
> >>
> >> Yes. Technical details are the same too:
> >>
> >> Technical Details
> >> meldrar.postgresql.org uses an invalid security certificate.
> >>
> >> The certificate is not trusted because no issuer chain was provided.
> >>
> >> (Error code: sec_error_unknown_issuer)
> >
> > Here is someone having a similar error on Firefox 11:
> >
> > http://support.mozilla.org/en-US/questions/923163
>
> yeah if you are NOT getting the error on https://www.postgresql.org we
> have identified the issue(it is affecting most of our ssl enabled sites
I get no error for https://www.postgresql.org.
> running lighttpd) as some sort of viral(...) copy&paste fail - will be
> fixed soon...
Thanks. You might be able to reproduce it by renaming ~/.mozilla to
another name, starting Firefox 11, and going to the problem URL.
--
Bruce Momjian <[email protected]> http://momjian.us
EnterpriseDB http://enterprisedb.com
+ It's impossible for everything to be true. +
^ permalink raw reply [nested|flat] 12+ messages in thread
* Re: Commitfest website certificate
@ 2012-04-18 18:54 Bruce Momjian <[email protected]>
parent: Stefan Kaltenbrunner <[email protected]>
1 sibling, 1 reply; 12+ messages in thread
From: Bruce Momjian @ 2012-04-18 18:54 UTC (permalink / raw)
To: Stefan Kaltenbrunner <[email protected]>; +Cc: Magnus Hagander <[email protected]>; pgsql-www
On Wed, Apr 18, 2012 at 08:18:04PM +0200, Stefan Kaltenbrunner wrote:
> On 04/18/2012 07:58 PM, Bruce Momjian wrote:
> > On Wed, Apr 18, 2012 at 01:52:27PM -0400, Bruce Momjian wrote:
> >>> Just to test a theory - do you get the same error if you connect to
> >>> https://meldrar.postgresql.org?
> >>
> >> Yes. Technical details are the same too:
> >>
> >> Technical Details
> >> meldrar.postgresql.org uses an invalid security certificate.
> >>
> >> The certificate is not trusted because no issuer chain was provided.
> >>
> >> (Error code: sec_error_unknown_issuer)
> >
> > Here is someone having a similar error on Firefox 11:
> >
> > http://support.mozilla.org/en-US/questions/923163
>
> yeah if you are NOT getting the error on https://www.postgresql.org we
> have identified the issue(it is affecting most of our ssl enabled sites
> running lighttpd) as some sort of viral(...) copy&paste fail - will be
> fixed soon...
I can confirm that is now fixed! Thanks.
--
Bruce Momjian <[email protected]> http://momjian.us
EnterpriseDB http://enterprisedb.com
+ It's impossible for everything to be true. +
^ permalink raw reply [nested|flat] 12+ messages in thread
* Re: Commitfest website certificate
@ 2012-04-18 19:16 Stefan Kaltenbrunner <[email protected]>
parent: Bruce Momjian <[email protected]>
0 siblings, 1 reply; 12+ messages in thread
From: Stefan Kaltenbrunner @ 2012-04-18 19:16 UTC (permalink / raw)
To: Bruce Momjian <[email protected]>; +Cc: Magnus Hagander <[email protected]>; pgsql-www
On 04/18/2012 08:54 PM, Bruce Momjian wrote:
> On Wed, Apr 18, 2012 at 08:18:04PM +0200, Stefan Kaltenbrunner wrote:
>> On 04/18/2012 07:58 PM, Bruce Momjian wrote:
>>> On Wed, Apr 18, 2012 at 01:52:27PM -0400, Bruce Momjian wrote:
>>>>> Just to test a theory - do you get the same error if you connect to
>>>>> https://meldrar.postgresql.org?
>>>>
>>>> Yes. Technical details are the same too:
>>>>
>>>> Technical Details
>>>> meldrar.postgresql.org uses an invalid security certificate.
>>>>
>>>> The certificate is not trusted because no issuer chain was provided.
>>>>
>>>> (Error code: sec_error_unknown_issuer)
>>>
>>> Here is someone having a similar error on Firefox 11:
>>>
>>> http://support.mozilla.org/en-US/questions/923163
>>
>> yeah if you are NOT getting the error on https://www.postgresql.org we
>> have identified the issue(it is affecting most of our ssl enabled sites
>> running lighttpd) as some sort of viral(...) copy&paste fail - will be
>> fixed soon...
>
> I can confirm that is now fixed! Thanks.
heh it was not actually fixed the moment you sent the mail, it "looked"
like it was fixed to you because your client probably cached the
intermediate certs the time you hit www.postgresql.org...
Stefan
^ permalink raw reply [nested|flat] 12+ messages in thread
* Re: Commitfest website certificate
@ 2012-04-18 19:19 Stefan Kaltenbrunner <[email protected]>
parent: Bruce Momjian <[email protected]>
0 siblings, 0 replies; 12+ messages in thread
From: Stefan Kaltenbrunner @ 2012-04-18 19:19 UTC (permalink / raw)
To: Bruce Momjian <[email protected]>; +Cc: Magnus Hagander <[email protected]>; pgsql-www
On 04/18/2012 08:53 PM, Bruce Momjian wrote:
> On Wed, Apr 18, 2012 at 08:18:04PM +0200, Stefan Kaltenbrunner wrote:
>> On 04/18/2012 07:58 PM, Bruce Momjian wrote:
>>> On Wed, Apr 18, 2012 at 01:52:27PM -0400, Bruce Momjian wrote:
>>>>> Just to test a theory - do you get the same error if you connect to
>>>>> https://meldrar.postgresql.org?
>>>>
>>>> Yes. Technical details are the same too:
>>>>
>>>> Technical Details
>>>> meldrar.postgresql.org uses an invalid security certificate.
>>>>
>>>> The certificate is not trusted because no issuer chain was provided.
>>>>
>>>> (Error code: sec_error_unknown_issuer)
>>>
>>> Here is someone having a similar error on Firefox 11:
>>>
>>> http://support.mozilla.org/en-US/questions/923163
>>
>> yeah if you are NOT getting the error on https://www.postgresql.org we
>> have identified the issue(it is affecting most of our ssl enabled sites
>
> I get no error for https://www.postgresql.org.
>
>> running lighttpd) as some sort of viral(...) copy&paste fail - will be
>> fixed soon...
>
> Thanks. You might be able to reproduce it by renaming ~/.mozilla to
> another name, starting Firefox 11, and going to the problem URL.
much easier to test using something like:
openssl s_client -connect commitfest.postgresql.org:443
no need to cripple your FF install :)
Stefan
^ permalink raw reply [nested|flat] 12+ messages in thread
* Re: Commitfest website certificate
@ 2012-04-18 21:08 Bruce Momjian <[email protected]>
parent: Stefan Kaltenbrunner <[email protected]>
0 siblings, 0 replies; 12+ messages in thread
From: Bruce Momjian @ 2012-04-18 21:08 UTC (permalink / raw)
To: Stefan Kaltenbrunner <[email protected]>; +Cc: Magnus Hagander <[email protected]>; pgsql-www
On Wed, Apr 18, 2012 at 09:16:21PM +0200, Stefan Kaltenbrunner wrote:
> On 04/18/2012 08:54 PM, Bruce Momjian wrote:
> > On Wed, Apr 18, 2012 at 08:18:04PM +0200, Stefan Kaltenbrunner wrote:
> >> On 04/18/2012 07:58 PM, Bruce Momjian wrote:
> >>> On Wed, Apr 18, 2012 at 01:52:27PM -0400, Bruce Momjian wrote:
> >>>>> Just to test a theory - do you get the same error if you connect to
> >>>>> https://meldrar.postgresql.org?
> >>>>
> >>>> Yes. Technical details are the same too:
> >>>>
> >>>> Technical Details
> >>>> meldrar.postgresql.org uses an invalid security certificate.
> >>>>
> >>>> The certificate is not trusted because no issuer chain was provided.
> >>>>
> >>>> (Error code: sec_error_unknown_issuer)
> >>>
> >>> Here is someone having a similar error on Firefox 11:
> >>>
> >>> http://support.mozilla.org/en-US/questions/923163
> >>
> >> yeah if you are NOT getting the error on https://www.postgresql.org we
> >> have identified the issue(it is affecting most of our ssl enabled sites
> >> running lighttpd) as some sort of viral(...) copy&paste fail - will be
> >> fixed soon...
> >
> > I can confirm that is now fixed! Thanks.
>
> heh it was not actually fixed the moment you sent the mail, it "looked"
> like it was fixed to you because your client probably cached the
> intermediate certs the time you hit www.postgresql.org...
Oh, good point.
--
Bruce Momjian <[email protected]> http://momjian.us
EnterpriseDB http://enterprisedb.com
+ It's impossible for everything to be true. +
^ permalink raw reply [nested|flat] 12+ messages in thread
end of thread, other threads:[~2012-04-18 21:08 UTC | newest]
Thread overview: 12+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2012-04-18 17:30 Commitfest website certificate Bruce Momjian <[email protected]>
2012-04-18 17:34 ` Magnus Hagander <[email protected]>
2012-04-18 17:39 ` Bruce Momjian <[email protected]>
2012-04-18 17:49 ` Stefan Kaltenbrunner <[email protected]>
2012-04-18 17:52 ` Bruce Momjian <[email protected]>
2012-04-18 17:58 ` Bruce Momjian <[email protected]>
2012-04-18 18:18 ` Stefan Kaltenbrunner <[email protected]>
2012-04-18 18:53 ` Bruce Momjian <[email protected]>
2012-04-18 19:19 ` Stefan Kaltenbrunner <[email protected]>
2012-04-18 18:54 ` Bruce Momjian <[email protected]>
2012-04-18 19:16 ` Stefan Kaltenbrunner <[email protected]>
2012-04-18 21:08 ` Bruce Momjian <[email protected]>
This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox