Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > chi.internet > #3531

Re: From the chicago police website

From Bruce Esquibel <bje@ripco.com>
Newsgroups chi.internet
Subject Re: From the chicago police website
Date 2016-06-23 10:49 +0000
Organization Ripco Communications Inc.
Message-ID <nkges0$lkf$1@remote5bge0.ripco.com> (permalink)
References (7 earlier) <e2308c17-2eef-4f2f-b18c-22584df99374@googlegroups.com> <nkepsl$l0o$1@reader1.panix.com> <6ac8e832-0dc8-4fc2-8bc4-dfdd1d666d43@googlegroups.com> <nkf3tb$gdl$1@reader1.panix.com> <b36f2537-d13b-410e-a45f-5d4d1d69f0d5@googlegroups.com>

Show all headers | View raw


Crawford Sausage Company <mea@brandylion.com> wrote:
> On Wednesday, June 22, 2016 at 5:36:28 PM UTC-5, Cydrome Leader wrote:

>> I decided to lookup the next caps beat meetings and came across this page
>> 
>> https://portal.chicagopolice.org/portal/page/portal/ClearPath/Communities/Districts/District12/Events
>> 
>> looks pretty straight foward to me. 

> Here's what I got:
> ----
> Secure Connection Failed


It still seems to be something anal with Firefox.

Only guess I have is it doesn't like wildcarded certificates.

It looks like chicagopolice.org is using a certificate issued to:

*.chicagopolice.org

which that * means "any match".

Normally when you get a cert, it's issued for the common name, like
portal.chicagopolice.org and if they wanted another one for like
meetings.chicagopolice.org, that would be another cert issued for that name.

If you have the money and a system that warrants it, you can purchase a
wildcarded cert which as long as it's "something".chicagopolice.org, the one
wildcarded certificate would work.

Only thing I can think of why Firefox wouldn't like it is because they are a
bit more of a security nightmare. Like on ripco, we have one cert for
webmail.ripco.com and a different one for email.ripco.com. If someone broke
in or did an exploit where they got a copy of the servers private key, they
would be able to mimick a server to validate itself as being real.

But only for that machine (webmail or email.ripco.com).

With the wildcard certificate, if any of the machines using it can be
exploited to get the server key, you can create new ones like
ripco.chicagopolice.org or brandylion.chicagopolice.org and that cert would
work for those just fine.

I dunno, my theory for the day.

-bruce
bje@ripco.com

Back to chi.internet | Previous | NextPrevious in thread | Next in thread | Find similar | Unroll thread


Thread

RE: From the chicago police website nobody@nowhere.invalid (Will Renkel) - 2016-06-18 10:58 +0000
  Re: From the chicago police website Crawford Sausage Company <mea@brandylion.com> - 2016-06-18 12:17 -0700
    Re: From the chicago police website Bruce Esquibel <bje@ripco.com> - 2016-06-19 11:13 +0000
      Re: From the chicago police website Geoff Gass <glg@tanzenmb.com> - 2016-06-19 16:09 +0000
        Re: From the chicago police website Crawford Sausage Company <mea@brandylion.com> - 2016-06-19 11:36 -0700
        Re: From the chicago police website jamie@ftupet.com (jamie) - 2016-06-20 00:16 +0000
          Re: From the chicago police website barbie gee <booger@nosespam.com> - 2016-06-20 17:52 -0500
          Re: From the chicago police website Cydrome Leader <presence@MUNGEpanix.com> - 2016-06-20 23:43 +0000
            Re: From the chicago police website Crawford Sausage Company <mea@brandylion.com> - 2016-06-20 17:25 -0700
              Re: From the chicago police website Cydrome Leader <presence@MUNGEpanix.com> - 2016-06-22 04:42 +0000
                Re: From the chicago police website Crawford Sausage Company <mea@brandylion.com> - 2016-06-22 10:40 -0700
                Re: From the chicago police website Cydrome Leader <presence@MUNGEpanix.com> - 2016-06-22 19:45 +0000
                Re: From the chicago police website Crawford Sausage Company <mea@brandylion.com> - 2016-06-22 13:36 -0700
                Re: From the chicago police website Cydrome Leader <presence@MUNGEpanix.com> - 2016-06-22 22:36 +0000
                Re: From the chicago police website Crawford Sausage Company <mea@brandylion.com> - 2016-06-22 16:08 -0700
                Re: From the chicago police website smr <me@shawnritchie.com> - 2016-06-22 19:03 -0500
                Re: From the chicago police website Crawford Sausage Company <mea@brandylion.com> - 2016-06-22 17:38 -0700
                Re: From the chicago police website Cydrome Leader <presence@MUNGEpanix.com> - 2016-06-23 06:02 +0000
                Re: From the chicago police website Bruce Esquibel <bje@ripco.com> - 2016-06-23 10:49 +0000
                Re: From the chicago police website Cydrome Leader <presence@MUNGEpanix.com> - 2016-06-23 20:44 +0000
                Re: From the chicago police website smr <me@shawnritchie.com> - 2016-06-22 19:01 -0500

csiph-web