Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
| From | Bruce Esquibel <bje@ripco.com> |
|---|---|
| Newsgroups | chi.internet |
| Subject | Re: From the chicago police website |
| Date | 2016-06-23 10:49 +0000 |
| Organization | Ripco Communications Inc. |
| Message-ID | <nkges0$lkf$1@remote5bge0.ripco.com> (permalink) |
| References | (7 earlier) <e2308c17-2eef-4f2f-b18c-22584df99374@googlegroups.com> <nkepsl$l0o$1@reader1.panix.com> <6ac8e832-0dc8-4fc2-8bc4-dfdd1d666d43@googlegroups.com> <nkf3tb$gdl$1@reader1.panix.com> <b36f2537-d13b-410e-a45f-5d4d1d69f0d5@googlegroups.com> |
Crawford Sausage Company <mea@brandylion.com> wrote: > On Wednesday, June 22, 2016 at 5:36:28 PM UTC-5, Cydrome Leader wrote: >> I decided to lookup the next caps beat meetings and came across this page >> >> https://portal.chicagopolice.org/portal/page/portal/ClearPath/Communities/Districts/District12/Events >> >> looks pretty straight foward to me. > Here's what I got: > ---- > Secure Connection Failed It still seems to be something anal with Firefox. Only guess I have is it doesn't like wildcarded certificates. It looks like chicagopolice.org is using a certificate issued to: *.chicagopolice.org which that * means "any match". Normally when you get a cert, it's issued for the common name, like portal.chicagopolice.org and if they wanted another one for like meetings.chicagopolice.org, that would be another cert issued for that name. If you have the money and a system that warrants it, you can purchase a wildcarded cert which as long as it's "something".chicagopolice.org, the one wildcarded certificate would work. Only thing I can think of why Firefox wouldn't like it is because they are a bit more of a security nightmare. Like on ripco, we have one cert for webmail.ripco.com and a different one for email.ripco.com. If someone broke in or did an exploit where they got a copy of the servers private key, they would be able to mimick a server to validate itself as being real. But only for that machine (webmail or email.ripco.com). With the wildcard certificate, if any of the machines using it can be exploited to get the server key, you can create new ones like ripco.chicagopolice.org or brandylion.chicagopolice.org and that cert would work for those just fine. I dunno, my theory for the day. -bruce bje@ripco.com
Back to chi.internet | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
RE: From the chicago police website nobody@nowhere.invalid (Will Renkel) - 2016-06-18 10:58 +0000
Re: From the chicago police website Crawford Sausage Company <mea@brandylion.com> - 2016-06-18 12:17 -0700
Re: From the chicago police website Bruce Esquibel <bje@ripco.com> - 2016-06-19 11:13 +0000
Re: From the chicago police website Geoff Gass <glg@tanzenmb.com> - 2016-06-19 16:09 +0000
Re: From the chicago police website Crawford Sausage Company <mea@brandylion.com> - 2016-06-19 11:36 -0700
Re: From the chicago police website jamie@ftupet.com (jamie) - 2016-06-20 00:16 +0000
Re: From the chicago police website barbie gee <booger@nosespam.com> - 2016-06-20 17:52 -0500
Re: From the chicago police website Cydrome Leader <presence@MUNGEpanix.com> - 2016-06-20 23:43 +0000
Re: From the chicago police website Crawford Sausage Company <mea@brandylion.com> - 2016-06-20 17:25 -0700
Re: From the chicago police website Cydrome Leader <presence@MUNGEpanix.com> - 2016-06-22 04:42 +0000
Re: From the chicago police website Crawford Sausage Company <mea@brandylion.com> - 2016-06-22 10:40 -0700
Re: From the chicago police website Cydrome Leader <presence@MUNGEpanix.com> - 2016-06-22 19:45 +0000
Re: From the chicago police website Crawford Sausage Company <mea@brandylion.com> - 2016-06-22 13:36 -0700
Re: From the chicago police website Cydrome Leader <presence@MUNGEpanix.com> - 2016-06-22 22:36 +0000
Re: From the chicago police website Crawford Sausage Company <mea@brandylion.com> - 2016-06-22 16:08 -0700
Re: From the chicago police website smr <me@shawnritchie.com> - 2016-06-22 19:03 -0500
Re: From the chicago police website Crawford Sausage Company <mea@brandylion.com> - 2016-06-22 17:38 -0700
Re: From the chicago police website Cydrome Leader <presence@MUNGEpanix.com> - 2016-06-23 06:02 +0000
Re: From the chicago police website Bruce Esquibel <bje@ripco.com> - 2016-06-23 10:49 +0000
Re: From the chicago police website Cydrome Leader <presence@MUNGEpanix.com> - 2016-06-23 20:44 +0000
Re: From the chicago police website smr <me@shawnritchie.com> - 2016-06-22 19:01 -0500
csiph-web