secure.informaction.com:443 uses an invalid security certifi

[Tree]

Passing this along as I started noticing it in the Browser Console.

[barbaz]

Works for me...

Moving to Metaforum.

[Tree]

I am seeing this in the Firefox Browser Console related to Noscript rather than something related to the forum (presuming it was moved to Metaforum because I did a poor job of articulating that).

I have reproduced the Browser Console info of secure.informaction.com:443 uses an invalid security certificate a couple of times since by closing Firefox and opening a new instance and then checking the Browser Console.

Any other info I can provide to help confirm or troubleshoot?

[barbaz]

Metaforum is the place to discuss issues with *any* of Giorgio's sites.

The way to troubleshoot this would be to click this link and if you get a cert error try viewing the certificate details (View > Page Info > Security), but I don't know what we'd be looking for so not sure what else to suggest at this point.

[Tree]

Metaforum is the place to discuss issues with *any* of Giorgio's sites.

Apologies. I thought the error was related to Noscript not functioning properly (ABE doesn't seem to work any longer?).

The way to troubleshoot this would be to click this link and if you get a cert error try viewing the certificate details (View > Page Info > Security), but I don't know what we'd be looking for so not sure what else to suggest at this point.

Yeah. I get the following.

Your connection is not secure

The owner of secure.informaction.com has configured their website improperly. To protect your information from being stolen, Firefox has not connected to this website.

Learn more…

secure.informaction.com uses an invalid security certificate.

The certificate is not trusted because the issuer certificate is unknown.
The server might not be sending the appropriate intermediate certificates.
An additional root certificate may need to be imported.

Error code: SEC_ERROR_UNKNOWN_ISSUER

View > Page Info > Security)

secure.informaction.com
This website does not supply ownership information.

Thanks for the help.

Any ideas why I would get an invalid security certificate error and you, or others, would not? I would have thought it would either be valid or invalid for everyone.

[Thrawn]

The certificate is issued by Let's Encrypt. Perhaps your browser doesn't trust them?

[therube]

As a test, create a new clean Profile & see what happens there.

The certificate is not trusted because the issuer certificate is unknown

Also antivirus are well known to create havoc when they inject themselves into the https stream & certificate stores.

[barbaz]

In case it helps to verify if the correct certificate is being served

SHA-256 Fingerprint:

Code: Select all

07:AA:1E:26:5C:17:60:82:3F:90:48:8B:77:B6:4D:E1:D6:BF:E1:97:7A:FA:98:A4:D2:53:74:AE:C4:7B:00:78

SHA-1 Fingerprint:

Code: Select all

19:59:91:16:5D:E8:9A:8A:E3:46:B3:66:A1:DC:6A:DD:F3:98:40:61

[barbaz]

View > Page Info > Security)

Sorry, I meant View > Page Info > Security > View Certificate

[Tree]

The certificate is issued by Let's Encrypt. Perhaps your browser doesn't trust them?

I don't think that is it because it works on noscript.net and on the forums here.

As a test, create a new clean Profile & see what happens there.

The certificate is not trusted because the issuer certificate is unknown

Also antivirus are well known to create havoc when then inject themselves into the https stream.

No change so far. I know it was working at least as recently as a week or two ago so I am hoping it will work itself out on its own since it seems to have started on its own (ie. doesn't seem related to a Noscript or Firefox version).

In case it helps to verify if the correct certificate is being served

SHA-256 Fingerprint:

Code: Select all

07:AA:1E:26:5C:17:60:82:3F:90:48:8B:77:B6:4D:E1:D6:BF:E1:97:7A:FA:98:A4:D2:53:74:AE:C4:7B:00:78

SHA-1 Fingerprint:

Code: Select all

19:59:91:16:5D:E8:9A:8A:E3:46:B3:66:A1:DC:6A:DD:F3:98:40:61

View > Page Info > Security)

Sorry, I meant View > Page Info > Security > View Certificate

I can't do either of those two since it doesn't recognize a certificate to get more info on.

I guess I will just ignore it for a bit and check it periodically.

Is there any harm in ABE not being able to detect WAN IP? Is that the only thing in Noscript that is not functioning properly due to this?

Thanks again.

[barbaz]

Is there any harm in ABE not being able to detect WAN IP? Is that the only thing in Noscript that is not functioning properly due to this?

Yes that's all you're missing.
ABE looks up the WAN IP to protect you from tampering by webpages if you have no router or if your router accepts connections on the WAN interface. More info: https://noscript.net/abe/wan/

[barbaz]

I can't do either of those two since it doesn't recognize a certificate to get more info on.

OK let's try getting it a different way. So under "I Understand The Risks" there should be a button to add security exception. Click that (but do *not* actually add exception!). You should see an option to "Get Certificate". Click that, then click "View Certificate".

[Tree]

I can't do either of those two since it doesn't recognize a certificate to get more info on.

OK let's try getting it a different way. So under "I Understand The Risks" there should be a button to add security exception. Click that (but do *not* actually add exception!). You should see an option to "Get Certificate". Click that, then click "View Certificate".

Copy and paste of the info I see below.

I checked the view certificate info from noscript.net and index.php and those appear similiar except it recognizes them as secure connections (it lists those both as This website does not supply ownership information even though it connects securely also) but not the one Noscript makes to secure.informaction.com:443 for the ABE WAN IP connection (the ones that connect securely say issued to maone.net rather than to secure.informaction.com, otherwise it seems the same minus the SN and SHA numbers).

CN secure.informaction.com
O<Not Part Of Certificate>
OU <Not Part Of Certificate>
SN 03:82:26:D3:75:2E:3F:09:EE:C3:49:8C:0A:87:53:60:D8:20

CN Let's Encrypt Authority X3
O Let's Encrypt
OU <Not Part Of Certificate>

Begins Saturday, April 02, 2016
Expires Friday, July 01, 2016

SHA-256 Fingerprint: 07:AA:1E:26:5C:17:60:82:3F:90:48:8B:77:B6:4D:E1:D6:BF:E1:97:7A:FA:98:A4:D2:53:74:AE:C4:7B:00:78
SHA-1 Fingerprint: 19:59:91:16:5D:E8:9A:8A:E3:46:B3:66:A1:DC:6A:DD:F3:98:40:61

[Tree]

And now I am wondering if I just did something (pretty positive I didn't though) because I closed Firefox and re-opened and now it is working again. ABE WAN IP is detected, the IP Echo link loads correctly and the view certificate recognizes them.

Any ideas what changed? All I did was click on the add exceptions.. copy and pasted the info and cancelled out of it. That and clicking view certificate on the noscript.net and forums ones. Why would that have fixed it or is it just some odd coincidence?

Anyway..

[barbaz]

Well, you *did* do something - you clicked that "Get Certificate" button. Maybe that force the browser to re-fetch the certificate and clear out something wrong? Not sure

Anyway, glad it's working for you again, let us know if the problem returns.