Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 230277 - https security address fails with invalid certificate
Summary: https security address fails with invalid certificate
Status: RESOLVED INVALID
Alias: None
Product: Gentoo Infrastructure
Classification: Unclassified
Component: Bugzilla (show other bugs)
Hardware: All Linux
: High major (vote)
Assignee: Bugzilla Admins
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2008-06-30 23:04 UTC by Robert Golding
Modified: 2011-10-30 23:16 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Robert Golding 2008-06-30 23:04:23 UTC 
I received email about a bug I had entered last night and the link to the secure site would not load with error:
From within FF3s' error page ------>

Cannot Complete Request

bugs.gentoo.org uses an invalid security certificate.

The certificate is not trusted because the issuer certificate is not trusted.

(Error code: sec_error_untrusted_issuer)

------>end

I tried to turn off cert security within FF3, but it still refused to load, I used the non secure site instead.

In Epiphany it allows you proceed anyway after viewing cert and giving warning about failed cert. Even then it tried to stop me with five more error messages telling me how bad it was to connect to an invalid cert site
Comment 1 Robert Golding 2008-06-30 23:08:44 UTC 
I finally found the cert and it says it expires in 2009. I don't really know how that system works, I just know I couldn't connect to the secure site.
Comment 2 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2008-07-01 00:10:10 UTC 
Pay attention to the mails to -dev-announce and -dev, that specifically noted we were moving to using CACert for bugzilla. You must import the CA cert to your browser, instructions were in the email.
Comment 3 Robert Golding 2008-07-01 04:04:22 UTC 
(In reply to comment #2)
> Pay attention to the mails to -dev-announce and -dev, that specifically noted
> we were moving to using CACert for bugzilla. You must import the CA cert to
> your browser, instructions were in the email.
> 

I don't recieve those mailouts as I'm not a dev.  Please leave link to the email so that I may import them
Comment 5 Robert Golding 2008-07-01 04:43:09 UTC 
(In reply to comment #4)
> http://archives.gentoo.org/gentoo-dev/msg_f24d46856ff4454efb6b3f63b6ac493c.xml
> 

Thankyou very much, cheers, Robert