Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.security > #5167 > unrolled thread
| Started by | Tea Wrex <wrextea@gmail.com> |
|---|---|
| First post | 2017-01-15 06:50 +0100 |
| Last post | 2017-01-15 14:00 +0100 |
| Articles | 4 — 4 participants |
Back to article view | Back to linux.debian.security
Certificate errors with security.debian.org Tea Wrex <wrextea@gmail.com> - 2017-01-15 06:50 +0100
Re: Certificate errors with security.debian.org Scrap <scrap@inventati.org> - 2017-01-15 07:50 +0100
Re: Certificate errors with security.debian.org Lupe Christoph <lupe@lupe-christoph.de> - 2017-01-15 11:20 +0100
Re: Certificate errors with security.debian.org Paul Wise <pabs@debian.org> - 2017-01-15 14:00 +0100
| From | Tea Wrex <wrextea@gmail.com> |
|---|---|
| Date | 2017-01-15 06:50 +0100 |
| Subject | Certificate errors with security.debian.org |
| Message-ID | <sZLRv-7bg-1@gated-at.bofh.it> |
[Multipart message — attachments visible in raw view] — view raw
I am unable to make HTTPS connections to https://security.debian.org/ ... My browser said my connection is insecure when I attempt to visit that site. Also, the report from SSL Labs says the site is not trusted. https://www.ssllabs.com/ssltest/analyze.html?d=security.debian.org What is the point of being able to use HTTPS in Apt's source.list if we cannot connect to security updates with HTTPS ? Yes, I understand that the security servers certificate authority is not loaded in my browser in Debian. Why is that? Your newest release added several certificate authorities, why not add your own? Please let us Debian users connect securely to https://security.debian.org/ You know about https://letsencrypt.org/ Why not use a certificate from them in order to get your certificates trusted? Or else fix your trust issue another way. PLEASE?! Thanks!
[toc] | [next] | [standalone]
| From | Scrap <scrap@inventati.org> |
|---|---|
| Date | 2017-01-15 07:50 +0100 |
| Message-ID | <sZMNz-7Jz-1@gated-at.bofh.it> |
| In reply to | #5167 |
[Multipart message — attachments visible in raw view] — view raw
Are you sure the URL is correct? If i try to connect to https://security.debian.org/ from Chrome I revice:" ERR_CONNECTION_REFUSED". If i try with out https i'm redirect to https://www.debian.org/security/ and this site have a trusted certificate. On 01/15/2017 06:41 AM, Tea Wrex wrote: > I am unable to make HTTPS connections to https://security.debian.org/ > ... My browser said my connection is insecure when I attempt to visit > that site. > > Also, the report from SSL Labs says the site is not trusted. > > https://www.ssllabs.com/ssltest/analyze.html?d=security.debian.org > > What is the point of being able to use HTTPS in Apt's source.list if > we cannot connect to security updates with HTTPS ? > > Yes, I understand that the security servers certificate authority is > not loaded in my browser in Debian. Why is that? Your newest release > added several certificate authorities, why not add your own? > > Please let us Debian users connect securely to > https://security.debian.org/ > > You know about https://letsencrypt.org/ Why not use a certificate from > them in order to get your certificates trusted? Or else fix your trust > issue another way. PLEASE?! > > Thanks!
[toc] | [prev] | [next] | [standalone]
| From | Lupe Christoph <lupe@lupe-christoph.de> |
|---|---|
| Date | 2017-01-15 11:20 +0100 |
| Message-ID | <sZQ4N-1ki-13@gated-at.bofh.it> |
| In reply to | #5168 |
On Sunday, 2017-01-15 at 07:40:40 +0100, Scrap wrote: > Are you sure the URL is correct? If i try to connect to > https://security.debian.org/ from Chrome I revice:" ERR_CONNECTION_REFUSED". > If i try with out https i'm redirect to https://www.debian.org/security/ and > this site have a trusted certificate. $ telnet -4 -z ssl -z debug security.debian.org 443 Trying 212.211.132.32... Trying 212.211.132.250... Trying 195.20.242.89... telnet: Unable to connect to remote host: Connection refused I have no IPv6 internet access, so I can't try that. HTH, Lupe Christoph -- | As everyone knows, it was predicted that the world would end last | | Wednesday at 10:00 PST. Since there appears to be a world in existence | | now, the entire universe must therefore have been recreated, complete | | with an apparent "history", last *Thursday*. QED. | | Seanna Watson, <1992Nov2.165142.11847@bcrka451.bnr.ca> |
[toc] | [prev] | [next] | [standalone]
| From | Paul Wise <pabs@debian.org> |
|---|---|
| Date | 2017-01-15 14:00 +0100 |
| Message-ID | <sZSzE-2CX-23@gated-at.bofh.it> |
| In reply to | #5167 |
On Sun, Jan 15, 2017 at 1:41 PM, Tea Wrex wrote: > I am unable to make HTTPS connections to https://security.debian.org/ security.d.o has never supported https. Some of the machines behind it also host other services, some of which support https, which is why you get certificate errors. -- bye, pabs https://wiki.debian.org/PaulWise
[toc] | [prev] | [standalone]
Back to top | Article view | linux.debian.security
csiph-web