Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > alt.os.linux > #44753 > unrolled thread

What do do? (forums.mtbr.com uses an invalid security certificate)

Back to article view | Back to alt.os.linux

Contents

  What do do? (forums.mtbr.com uses an invalid security certificate) harry newton <harry@is.invalid> - 2017-06-08 02:29 +0000
    Re: What do do? (forums.mtbr.com uses an invalid security certificate) Dan Purgert <dan@djph.net> - 2017-06-08 10:08 +0000
    Re: What do do? (forums.mtbr.com uses an invalid security certificate) John Doe <always.look@message.header> - 2017-06-08 10:12 +0000
    Re: What do do? (forums.mtbr.com uses an invalid security certificate) Mike Easter <MikeE@ster.invalid> - 2017-06-08 07:41 -0700
    Re: What do do? (forums.mtbr.com uses an invalid security certificate) Mike Easter <MikeE@ster.invalid> - 2017-06-08 09:26 -0700

#44753 — What do do? (forums.mtbr.com uses an invalid security certificate)

I just want to have a normal safe encrypted connection to this web site:
 https://forums.mtbr.com/

But I get this error which is what I'm asking you about:
http://i.cubeupload.com/pNM36t.gif

The error in words is:
 Your connection is not secure.
 The owner of forums.mtbr.com has configured their website improperly.
 To protect your information from being stolen, Tor Browser has
 not connected to this website.
 [Advanced]
 forums.mtbr.com uses an invalid security certificate.
 The certificate is only valid for the following names:
 cloudfront.net,*.cloudfront.net
 Error code: SSL_ERROR_BAD_CERT_DOMAIN
 [Add Exception...]

Should I press "Add Exception"?
All I want is to log into the site in a secure encrypted way.

I'm not sure what is the RIGHT thing to do.

What I did was press the button to download the certificate.
Did I need to do that?

Then I pressed the button to confirm the certificate.

After a bunch of warnings it let me in with dashes along the http.
http://i.cubeupload.com/hUBZXl.gif

Did I do the right steps?
How do I undo what I did if not?

Can someone just explain what is going on to a networking noob?

[toc] | [next] | [standalone]

#44757

harry newton wrote:
> I just want to have a normal safe encrypted connection to this web site:
>  https://forums.mtbr.com/
>
> But I get this error which is what I'm asking you about:
> http://i.cubeupload.com/pNM36t.gif
>
> The error in words is:
>  Your connection is not secure.
>  The owner of forums.mtbr.com has configured their website improperly.
>  To protect your information from being stolen, Tor Browser has
>  not connected to this website.
>  [Advanced]
>  forums.mtbr.com uses an invalid security certificate.
>  The certificate is only valid for the following names:
>  cloudfront.net,*.cloudfront.net
>  Error code: SSL_ERROR_BAD_CERT_DOMAIN
>  [Add Exception...]
>
> Should I press "Add Exception"?
> All I want is to log into the site in a secure encrypted way.

Contact the forum admin -- seems they're using cloudfront as a CDN /
loadbalancer, but the certs are misconfigured.

>
> I'm not sure what is the RIGHT thing to do.

It's a bit of a grey area, honestly.

>
> What I did was press the button to download the certificate.
> Did I need to do that?

Probably - depends on the actual browser (most just allow you to add an
exception on a temporary or permanent basis).

>
> Did I do the right steps?
> How do I undo what I did if not?

For some value of "right".  Revoking the exception depends on the what
the "base" browser is (i.e. Firefox or Chrome), as they each have
slightly different methods for revoking the exception.

>
> Can someone just explain what is going on to a networking noob?

Sparknotes version:
 - You went to website https://forums.somewhere.com
 - The site presented a certificate for https://somewhere-else.com
 - Your browser properly alerted you to the disparity between "expected"
   and "provided" certificates.


-- 
|_|O|_| Registered Linux user #585947
|_|_|O| Github: https://github.com/dpurgert
|O|O|O| PGP: 05CA 9A50 3F2E 1335 4DC5  4AEE 8E11 DDF3 1279 A281

[toc] | [prev] | [next] | [standalone]

#44758

MTBR sucks anyway.

Try a better forum...

http://www.bikeforums.net




-- 

harry newton <harry@is.invalid> wrote:

> I just want to have a normal safe encrypted connection to this web site:
>  https://forums.mtbr.com/
> 
> But I get this error which is what I'm asking you about:
> http://i.cubeupload.com/pNM36t.gif
> 
> The error in words is:
>  Your connection is not secure.
>  The owner of forums.mtbr.com has configured their website improperly.
>  To protect your information from being stolen, Tor Browser has
>  not connected to this website.
>  [Advanced]
>  forums.mtbr.com uses an invalid security certificate.
>  The certificate is only valid for the following names:
>  cloudfront.net,*.cloudfront.net
>  Error code: SSL_ERROR_BAD_CERT_DOMAIN
>  [Add Exception...]
> 
> Should I press "Add Exception"?
> All I want is to log into the site in a secure encrypted way.
> 
> I'm not sure what is the RIGHT thing to do.
> 
> What I did was press the button to download the certificate.
> Did I need to do that?
> 
> Then I pressed the button to confirm the certificate.
> 
> After a bunch of warnings it let me in with dashes along the http.
> http://i.cubeupload.com/hUBZXl.gif
> 
> Did I do the right steps?
> How do I undo what I did if not?
> 
> Can someone just explain what is going on to a networking noob?

[toc] | [prev] | [next] | [standalone]

#44760

harry newton wrote:
> I just want to have a normal safe encrypted connection to this web site:
>   https://forums.mtbr.com/
> 
> But I get this error which is what I'm asking you about:
> http://i.cubeupload.com/pNM36t.gif

Optimally they should straighten out their certificate situation.

> The error in words is:
>   Your connection is not secure.
>   The owner of forums.mtbr.com has configured their website improperly.
>   To protect your information from being stolen, Tor Browser has
>   not connected to this website.
>   [Advanced]
>   forums.mtbr.com uses an invalid security certificate.
>   The certificate is only valid for the following names:
>   cloudfront.net,*.cloudfront.net
>   Error code: SSL_ERROR_BAD_CERT_DOMAIN
>   [Add Exception...]
> 
> Should I press "Add Exception"?
> All I want is to log into the site in a secure encrypted way.
> 
> I'm not sure what is the RIGHT thing to do.

Moz/Ffx has a pretty good page 
https://support.mozilla.org/en-US/kb/what-does-your-connection-is-not-secure-mean

Table of Contents
     What to do if you see this error?
     Technical information
         The certificate will not be valid until (date)
         The certificate expired on (date)
         The certificate is not trusted because the issuer certificate 
is unknown
         The certificate is not trusted because it is self-signed
         The certificate is only valid for (site name)
         Corrupted certificate store
     Bypassing the warning
     Reporting the Error

> What I did was press the button to download the certificate.
> Did I need to do that?

Only if you want to go someplace which has a screwed up certificate.

> Then I pressed the button to confirm the certificate.
> 
> After a bunch of warnings it let me in with dashes along the http.
> http://i.cubeupload.com/hUBZXl.gif
> 
> Did I do the right steps?
> How do I undo what I did if not?
> 
> Can someone just explain what is going on to a networking noob?

A site that is going to use https has to have a proper certificate or 
they shouldn't use https. If the site is using some certificate that 
isn't actually theirs to use, then they should straighten that out.


-- 
Mike Easter

[toc] | [prev] | [next] | [standalone]

#44761

harry newton wrote:
> I just want to have a normal safe encrypted connection to this web site:
>   https://forums.mtbr.com/

You can access those forums without cert at http.

You can communicate with the domain holder about certs, but others have 
communicated the problem as far back as 2007.  The explanation response 
wasn't clear to me.

Nowadays one can use Let's Encrypt to save money on certs so maybe it 
would be easier for them to fix now.


-- 
Mike Easter

[toc] | [prev] | [standalone]

Back to top | Article view | alt.os.linux

csiph-web