MozillaZine

untrusted connection - only SM

Discussion of general topics about Seamonkey
Justinh
 
Posts: 272
Joined: November 13th, 2004, 7:03 pm
Location: Alabama

Post Posted October 28th, 2020, 4:59 pm

Why does SM 2.53.4 block connection to https://community.windows.com/en-us/vid ... c7_mWN0wi8 with "Unstrusted Connection"? It seems every other browser likes the site.

"community.windows.com uses an invalid security certificate"

ndebord

User avatar
 
Posts: 899
Joined: December 7th, 2002, 9:53 am

Post Posted October 28th, 2020, 5:30 pm

Justinh wrote:Why does SM 2.53.4 block connection to https://community.windows.com/en-us/vid ... c7_mWN0wi8 with "Unstrusted Connection"? It seems every other browser likes the site.

"community.windows.com uses an invalid security certificate"


Justinh,

No problems with that site for me.

Nick
-N- Quis custodiet ipsos custodes
SeaMonkey(32bit), Acer Spin, Windows 10 Pro (X64 v1909), WinPatrol, MalwarebytesPremium & Avira

Justinh
 
Posts: 272
Joined: November 13th, 2004, 7:03 pm
Location: Alabama

Post Posted October 28th, 2020, 6:39 pm

ndebord wrote:No problems with that site for me.


Does this mean you've forced some non-default/automatic cert stores in the past? Have you added an exception before (and forgot about it)?
"The certificate is not trusted because the issuer certificate is unknown. The server might not be sending the appropriate intermediate certificates. An additional root certificate may need to be imported."

ndebord

User avatar
 
Posts: 899
Joined: December 7th, 2002, 9:53 am

Post Posted October 29th, 2020, 7:30 am

Justinh wrote:
ndebord wrote:No problems with that site for me.


Does this mean you've forced some non-default/automatic cert stores in the past? Have you added an exception before (and forgot about it)?
"The certificate is not trusted because the issuer certificate is unknown. The server might not be sending the appropriate intermediate certificates. An additional root certificate may need to be imported."


Justinh,

I have not bothered to save non-default cert stores, nor have I added exceptions. Will have to look if something happened automatically, but don't think so.

Nick
-N- Quis custodiet ipsos custodes
SeaMonkey(32bit), Acer Spin, Windows 10 Pro (X64 v1909), WinPatrol, MalwarebytesPremium & Avira

Frank Lion

User avatar
 
Posts: 20854
Joined: April 23rd, 2004, 6:59 pm
Location: ... The Exorcist....United Kingdom

Post Posted October 29th, 2020, 1:01 pm

Justinh wrote:"The certificate is not trusted because the issuer certificate is unknown. The server might not be sending the appropriate intermediate certificates. An additional root certificate may need to be imported."

With that message, you go to 'I understand the risk' bit and then View the certificate that it needs and then import it in Prefs/Priv&Sec/Certs, having download it first as a .crl.

The cert it's looking for is GlobalSign Organization Validation CA - SHA256 - G3.

I also toggled security.enterprise_roots.enabled to True in about:config.




The general principles outlined above apply to most/all cert. type problems and this stuff is good to know for everyone, just because it can hit when you least want it and fixing it yourself saves a lot of time.
Metal Lion latest SeaMonkey & Thunderbird Themes - Sea Monkey and Silver Sea Monkey
"The only thing necessary for the triumph of evil, is for good men to do nothing." - Edmund Burke (attrib.)

frg
 
Posts: 998
Joined: December 15th, 2015, 1:20 pm

Post Posted October 29th, 2020, 2:53 pm

Works fine here.

If in doubt suspect you favorite antivirus software playing man in the middle.

FRG

Frank Lion

User avatar
 
Posts: 20854
Joined: April 23rd, 2004, 6:59 pm
Location: ... The Exorcist....United Kingdom

Post Posted October 29th, 2020, 3:05 pm

frg wrote:If in doubt suspect you favorite antivirus software playing man in the middle.

...or even the router! Years back, I had that.
Metal Lion latest SeaMonkey & Thunderbird Themes - Sea Monkey and Silver Sea Monkey
"The only thing necessary for the triumph of evil, is for good men to do nothing." - Edmund Burke (attrib.)

Justinh
 
Posts: 272
Joined: November 13th, 2004, 7:03 pm
Location: Alabama

Post Posted November 2nd, 2020, 5:41 pm

Since there is no problem with another browser on the same computer, it is not AV or the router.

Why isn't security.enterprise_roots.enabled set to true by default?

Frank Lion

User avatar
 
Posts: 20854
Joined: April 23rd, 2004, 6:59 pm
Location: ... The Exorcist....United Kingdom

Post Posted November 3rd, 2020, 2:10 am

Justinh wrote:Since there is no problem with another browser on the same computer, it is not AV or the router.

Poor logic.

AV and routers can, and have, blocked individual versions of browsers and stopped them connecting to websites (this used to happen almost every update with Firefox). They have also selectively blocked random websites and thrown up SSL warnings for legit sites, without any obvious pattern and so on.

Hundreds of threads - https://cse.google.com/cse?cx=003258325 ... irus&sa=Go

..all with guys doing the exact same 'Since there is no problem with another browser on the same computer, it is not AV or the router.' with the exact same certainty, all without any testing, year after damn year.
Metal Lion latest SeaMonkey & Thunderbird Themes - Sea Monkey and Silver Sea Monkey
"The only thing necessary for the triumph of evil, is for good men to do nothing." - Edmund Burke (attrib.)

therube

User avatar
 
Posts: 20571
Joined: March 10th, 2004, 9:59 pm
Location: Maryland USA

Post Posted November 3rd, 2020, 9:57 am


only SM

Au contraire - on my end.

FF 84 nightly.
Pale Moon 28.14.2.
SeaMonkey 2.53.6beta.
SeaMonkey 2.49.5. ... ALL fail.

Secure Connection Failed

An error occurred during a connection to community.windows.com. PR_CONNECT_RESET_ERROR
The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.


https://support.mozilla.org/en-US/kb/se ... ot-connect

Interesting situation, as I see it.
(I'm not going to reset modem/router to see if that fixes it, but would be nice to know.)
Fire 750, bring back 250.
Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball CopyURL+ FetchTextURL FlashGot NoScript

Frank Lion

User avatar
 
Posts: 20854
Joined: April 23rd, 2004, 6:59 pm
Location: ... The Exorcist....United Kingdom

Post Posted November 3rd, 2020, 11:38 pm

therube wrote:Interesting situation, as I see it.
(I'm not going to reset modem/router to see if that fixes it, but would be nice to know.)

Perhaps I write too subtly for you? - viewtopic.php?p=14876733#p14876733

i.e. in this case, the required cert didn't exist in SM, certainly not on mine, and therefore needed to be added.
Metal Lion latest SeaMonkey & Thunderbird Themes - Sea Monkey and Silver Sea Monkey
"The only thing necessary for the triumph of evil, is for good men to do nothing." - Edmund Burke (attrib.)

Return to SeaMonkey General


Who is online

Users browsing this forum: No registered users and 2 guests