Received: from magus.postgresql.org (magus.postgresql.org [87.238.57.229]) by mail.postgresql.org (Postfix) with ESMTP id 9178918BA22E for ; Wed, 18 Apr 2012 16:20:04 -0300 (ADT) Received: from cronos.madness.at ([2a02:16a8:dc41::10]) by magus.postgresql.org with esmtp (Exim 4.72) (envelope-from ) id 1SKaQ6-0006OW-JU for pgsql-www@postgresql.org; Wed, 18 Apr 2012 19:20:03 +0000 Received: from [2001:470:7a2d::22] by cronos.madness.at with esmtpsa (TLS1.0:RSA_AES_256_CBC_SHA1:32) (Exim 4.72) (envelope-from ) id 1SKaPo-00032l-N6; Wed, 18 Apr 2012 21:19:47 +0200 Message-ID: <4F8F13CB.6030104@kaltenbrunner.cc> Date: Wed, 18 Apr 2012 21:19:39 +0200 From: Stefan Kaltenbrunner User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.2.24) Gecko/20111120 Icedove/3.1.16 MIME-Version: 1.0 To: Bruce Momjian CC: Magnus Hagander , PostgreSQL www Subject: Re: Commitfest website certificate References: <20120418173042.GA6450@momjian.us> <20120418173915.GB6450@momjian.us> <4F8EFE94.3050502@kaltenbrunner.cc> <20120418175227.GC6450@momjian.us> <20120418175832.GD6450@momjian.us> <4F8F055C.402@kaltenbrunner.cc> <20120418185335.GE6450@momjian.us> In-Reply-To: <20120418185335.GE6450@momjian.us> X-Enigmail-Version: 1.1.2 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-Pg-Spam-Score: -1.9 (-) X-Archive-Number: 201204/47 X-Sequence-Number: 20621 On 04/18/2012 08:53 PM, Bruce Momjian wrote: > On Wed, Apr 18, 2012 at 08:18:04PM +0200, Stefan Kaltenbrunner wrote: >> On 04/18/2012 07:58 PM, Bruce Momjian wrote: >>> On Wed, Apr 18, 2012 at 01:52:27PM -0400, Bruce Momjian wrote: >>>>> Just to test a theory - do you get the same error if you connect to >>>>> https://meldrar.postgresql.org? >>>> >>>> Yes. Technical details are the same too: >>>> >>>> Technical Details >>>> meldrar.postgresql.org uses an invalid security certificate. >>>> >>>> The certificate is not trusted because no issuer chain was provided. >>>> >>>> (Error code: sec_error_unknown_issuer) >>> >>> Here is someone having a similar error on Firefox 11: >>> >>> http://support.mozilla.org/en-US/questions/923163 >> >> yeah if you are NOT getting the error on https://www.postgresql.org we >> have identified the issue(it is affecting most of our ssl enabled sites > > I get no error for https://www.postgresql.org. > >> running lighttpd) as some sort of viral(...) copy&paste fail - will be >> fixed soon... > > Thanks. You might be able to reproduce it by renaming ~/.mozilla to > another name, starting Firefox 11, and going to the problem URL. much easier to test using something like: openssl s_client -connect commitfest.postgresql.org:443 no need to cripple your FF install :) Stefan