Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 230277

Summary: https security address fails with invalid certificate
Product: Gentoo Infrastructure Reporter: Robert Golding <robert.golding>
Component: BugzillaAssignee: Bugzilla Admins <bugzilla>
Status: RESOLVED INVALID    
Severity: major    
Priority: High    
Version: unspecified   
Hardware: All   
OS: Linux   
Whiteboard:
Package list:
Runtime testing required: ---

Description Robert Golding 2008-06-30 23:04:23 UTC
I received email about a bug I had entered last night and the link to the secure site would not load with error:
From within FF3s' error page ------>

Cannot Complete Request

bugs.gentoo.org uses an invalid security certificate.

The certificate is not trusted because the issuer certificate is not trusted.

(Error code: sec_error_untrusted_issuer)

------>end

I tried to turn off cert security within FF3, but it still refused to load, I used the non secure site instead.

In Epiphany it allows you proceed anyway after viewing cert and giving warning about failed cert. Even then it tried to stop me with five more error messages telling me how bad it was to connect to an invalid cert site
Comment 1 Robert Golding 2008-06-30 23:08:44 UTC
I finally found the cert and it says it expires in 2009. I don't really know how that system works, I just know I couldn't connect to the secure site.
Comment 2 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2008-07-01 00:10:10 UTC
Pay attention to the mails to -dev-announce and -dev, that specifically noted we were moving to using CACert for bugzilla. You must import the CA cert to your browser, instructions were in the email.
Comment 3 Robert Golding 2008-07-01 04:04:22 UTC
(In reply to comment #2)
> Pay attention to the mails to -dev-announce and -dev, that specifically noted
> we were moving to using CACert for bugzilla. You must import the CA cert to
> your browser, instructions were in the email.
> 

I don't recieve those mailouts as I'm not a dev.  Please leave link to the email so that I may import them
Comment 5 Robert Golding 2008-07-01 04:43:09 UTC
(In reply to comment #4)
> http://archives.gentoo.org/gentoo-dev/msg_f24d46856ff4454efb6b3f63b6ac493c.xml
> 

Thankyou very much, cheers, Robert