secure.informaction.com:443 uses an invalid security certifi

Discussion about the board itself, forums organization and site bugs.
Tree
Junior Member
Posts: 25
Joined: Mon Mar 14, 2016 8:18 pm

secure.informaction.com:443 uses an invalid security certifi

Post by Tree » Tue Apr 12, 2016 7:44 pm

Passing this along as I started noticing it in the Browser Console.

Image
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0

barbaz
Senior Member
Posts: 9230
Joined: Sat Aug 03, 2013 5:45 pm

Re: secure.informaction.com:443 uses an invalid security cer

Post by barbaz » Tue Apr 12, 2016 8:26 pm

Works for me...

Moving to Metaforum.
*Always* check the changelogs BEFORE updating that important software!
-

Tree
Junior Member
Posts: 25
Joined: Mon Mar 14, 2016 8:18 pm

Re: secure.informaction.com:443 uses an invalid security cer

Post by Tree » Tue Apr 12, 2016 10:20 pm

I am seeing this in the Firefox Browser Console related to Noscript rather than something related to the forum (presuming it was moved to Metaforum because I did a poor job of articulating that).

I have reproduced the Browser Console info of secure.informaction.com:443 uses an invalid security certificate a couple of times since by closing Firefox and opening a new instance and then checking the Browser Console.

Any other info I can provide to help confirm or troubleshoot?
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0

barbaz
Senior Member
Posts: 9230
Joined: Sat Aug 03, 2013 5:45 pm

Re: secure.informaction.com:443 uses an invalid security cer

Post by barbaz » Tue Apr 12, 2016 11:07 pm

Metaforum is the place to discuss issues with *any* of Giorgio's sites.

The way to troubleshoot this would be to click this link and if you get a cert error try viewing the certificate details (View > Page Info > Security), but I don't know what we'd be looking for so not sure what else to suggest at this point.
*Always* check the changelogs BEFORE updating that important software!
-

Tree
Junior Member
Posts: 25
Joined: Mon Mar 14, 2016 8:18 pm

Re: secure.informaction.com:443 uses an invalid security cer

Post by Tree » Tue Apr 12, 2016 11:22 pm

barbaz wrote:Metaforum is the place to discuss issues with *any* of Giorgio's sites.


Apologies. I thought the error was related to Noscript not functioning properly (ABE doesn't seem to work any longer?).

barbaz wrote:The way to troubleshoot this would be to click this link and if you get a cert error try viewing the certificate details (View > Page Info > Security), but I don't know what we'd be looking for so not sure what else to suggest at this point.


Yeah. I get the following.

Your connection is not secure

The owner of secure.informaction.com has configured their website improperly. To protect your information from being stolen, Firefox has not connected to this website.

Learn more…

secure.informaction.com uses an invalid security certificate.

The certificate is not trusted because the issuer certificate is unknown.
The server might not be sending the appropriate intermediate certificates.
An additional root certificate may need to be imported.

Error code: SEC_ERROR_UNKNOWN_ISSUER


View > Page Info > Security)

secure.informaction.com
This website does not supply ownership information.


Thanks for the help.

Any ideas why I would get an invalid security certificate error and you, or others, would not? I would have thought it would either be valid or invalid for everyone.
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0

User avatar
Thrawn
Senior Member
Posts: 3106
Joined: Mon Jan 16, 2012 3:46 am
Location: Australia
Contact:

Re: secure.informaction.com:443 uses an invalid security cer

Post by Thrawn » Wed Apr 13, 2016 12:07 am

The certificate is issued by Let's Encrypt. Perhaps your browser doesn't trust them?
======
Thrawn
------------
Religion is not the opium of the masses. Daily life is the opium of the masses.

True religion, which dares to acknowledge death and challenge the way we live, is an attempt to wake up.
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0

User avatar
therube
Ambassador
Posts: 7431
Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA

Re: secure.informaction.com:443 uses an invalid security cer

Post by therube » Wed Apr 13, 2016 12:30 am

As a test, create a new clean Profile & see what happens there.

The certificate is not trusted because the issuer certificate is unknown

Also antivirus are well known to create havoc when they inject themselves into the https stream & certificate stores.
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:43.0) Gecko/20100101 Firefox/43.0 SeaMonkey/2.40

barbaz
Senior Member
Posts: 9230
Joined: Sat Aug 03, 2013 5:45 pm

Re: secure.informaction.com:443 uses an invalid security cer

Post by barbaz » Wed Apr 13, 2016 1:15 pm

In case it helps to verify if the correct certificate is being served

SHA-256 Fingerprint:

Code: Select all

07:AA:1E:26:5C:17:60:82:3F:90:48:8B:77:B6:4D:E1:D6:BF:E1:97:7A:FA:98:A4:D2:53:74:AE:C4:7B:00:78

SHA-1 Fingerprint:

Code: Select all

19:59:91:16:5D:E8:9A:8A:E3:46:B3:66:A1:DC:6A:DD:F3:98:40:61
*Always* check the changelogs BEFORE updating that important software!
-

barbaz
Senior Member
Posts: 9230
Joined: Sat Aug 03, 2013 5:45 pm

Re: secure.informaction.com:443 uses an invalid security cer

Post by barbaz » Wed Apr 13, 2016 1:29 pm

Tree wrote:View > Page Info > Security)

Sorry, I meant View > Page Info > Security > View Certificate
:oops:
*Always* check the changelogs BEFORE updating that important software!
-

Tree
Junior Member
Posts: 25
Joined: Mon Mar 14, 2016 8:18 pm

Re: secure.informaction.com:443 uses an invalid security cer

Post by Tree » Thu Apr 14, 2016 8:12 pm

Thrawn wrote:The certificate is issued by Let's Encrypt. Perhaps your browser doesn't trust them?


I don't think that is it because it works on noscript.net and on the forums here.

therube wrote:As a test, create a new clean Profile & see what happens there.

The certificate is not trusted because the issuer certificate is unknown

Also antivirus are well known to create havoc when then inject themselves into the https stream.


No change so far. I know it was working at least as recently as a week or two ago so I am hoping it will work itself out on its own since it seems to have started on its own (ie. doesn't seem related to a Noscript or Firefox version).

barbaz wrote:In case it helps to verify if the correct certificate is being served

SHA-256 Fingerprint:

Code: Select all

07:AA:1E:26:5C:17:60:82:3F:90:48:8B:77:B6:4D:E1:D6:BF:E1:97:7A:FA:98:A4:D2:53:74:AE:C4:7B:00:78

SHA-1 Fingerprint:

Code: Select all

19:59:91:16:5D:E8:9A:8A:E3:46:B3:66:A1:DC:6A:DD:F3:98:40:61


barbaz wrote:
Tree wrote:View > Page Info > Security)

Sorry, I meant View > Page Info > Security > View Certificate
:oops:


I can't do either of those two since it doesn't recognize a certificate to get more info on.

I guess I will just ignore it for a bit and check it periodically.

Is there any harm in ABE not being able to detect WAN IP? Is that the only thing in Noscript that is not functioning properly due to this?

Thanks again.
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0

barbaz
Senior Member
Posts: 9230
Joined: Sat Aug 03, 2013 5:45 pm

Re: secure.informaction.com:443 uses an invalid security cer

Post by barbaz » Thu Apr 14, 2016 10:53 pm

Tree wrote:Is there any harm in ABE not being able to detect WAN IP? Is that the only thing in Noscript that is not functioning properly due to this?

Yes that's all you're missing.
ABE looks up the WAN IP to protect you from tampering by webpages if you have no router or if your router accepts connections on the WAN interface. More info: https://noscript.net/abe/wan/
*Always* check the changelogs BEFORE updating that important software!
-

barbaz
Senior Member
Posts: 9230
Joined: Sat Aug 03, 2013 5:45 pm

Re: secure.informaction.com:443 uses an invalid security cer

Post by barbaz » Thu Apr 14, 2016 10:56 pm

Tree wrote:I can't do either of those two since it doesn't recognize a certificate to get more info on.

OK let's try getting it a different way. So under "I Understand The Risks" there should be a button to add security exception. Click that (but do *not* actually add exception!). You should see an option to "Get Certificate". Click that, then click "View Certificate".
*Always* check the changelogs BEFORE updating that important software!
-

Tree
Junior Member
Posts: 25
Joined: Mon Mar 14, 2016 8:18 pm

Re: secure.informaction.com:443 uses an invalid security cer

Post by Tree » Thu Apr 14, 2016 11:50 pm

barbaz wrote:
Tree wrote:I can't do either of those two since it doesn't recognize a certificate to get more info on.

OK let's try getting it a different way. So under "I Understand The Risks" there should be a button to add security exception. Click that (but do *not* actually add exception!). You should see an option to "Get Certificate". Click that, then click "View Certificate".


Copy and paste of the info I see below.

I checked the view certificate info from noscript.net and index.php and those appear similiar except it recognizes them as secure connections (it lists those both as This website does not supply ownership information even though it connects securely also) but not the one Noscript makes to secure.informaction.com:443 for the ABE WAN IP connection (the ones that connect securely say issued to maone.net rather than to secure.informaction.com, otherwise it seems the same minus the SN and SHA numbers).

CN secure.informaction.com
O<Not Part Of Certificate>
OU <Not Part Of Certificate>
SN 03:82:26:D3:75:2E:3F:09:EE:C3:49:8C:0A:87:53:60:D8:20

CN Let's Encrypt Authority X3
O Let's Encrypt
OU <Not Part Of Certificate>

Begins Saturday, April 02, 2016
Expires Friday, July 01, 2016

SHA-256 Fingerprint: 07:AA:1E:26:5C:17:60:82:3F:90:48:8B:77:B6:4D:E1:D6:BF:E1:97:7A:FA:98:A4:D2:53:74:AE:C4:7B:00:78
SHA-1 Fingerprint: 19:59:91:16:5D:E8:9A:8A:E3:46:B3:66:A1:DC:6A:DD:F3:98:40:61
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0

Tree
Junior Member
Posts: 25
Joined: Mon Mar 14, 2016 8:18 pm

Re: secure.informaction.com:443 uses an invalid security cer

Post by Tree » Fri Apr 15, 2016 12:19 am

And now I am wondering if I just did something (pretty positive I didn't though) because I closed Firefox and re-opened and now it is working again. ABE WAN IP is detected, the IP Echo link loads correctly and the view certificate recognizes them.

Any ideas what changed? All I did was click on the add exceptions.. copy and pasted the info and cancelled out of it. That and clicking view certificate on the noscript.net and forums ones. Why would that have fixed it or is it just some odd coincidence?

Anyway..
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0

barbaz
Senior Member
Posts: 9230
Joined: Sat Aug 03, 2013 5:45 pm

Re: secure.informaction.com:443 uses an invalid security cer

Post by barbaz » Fri Apr 15, 2016 1:39 am

Well, you *did* do something - you clicked that "Get Certificate" button. Maybe that force the browser to re-fetch the certificate and clear out something wrong? Not sure Image

Anyway, glad it's working for you again, let us know if the problem returns.
*Always* check the changelogs BEFORE updating that important software!
-

Post Reply