* [Caml-list] ocaml.org ssl certificate problem
@ 2014-09-30 2:15 Milan Stanojević
2014-09-30 2:28 ` Peter Zotov
2014-09-30 7:31 ` David Allsopp
0 siblings, 2 replies; 3+ messages in thread
From: Milan Stanojević @ 2014-09-30 2:15 UTC (permalink / raw)
To: Caml List
Firefox is complaining about ocaml.org's certificate issuer, says
"unknown issuer".
Chromium doesn't complain and allows me to open ocaml.org.
It's possible my configuration is messed up.
Anyone else having this problem?
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: [Caml-list] ocaml.org ssl certificate problem
2014-09-30 2:15 [Caml-list] ocaml.org ssl certificate problem Milan Stanojević
@ 2014-09-30 2:28 ` Peter Zotov
2014-09-30 7:31 ` David Allsopp
1 sibling, 0 replies; 3+ messages in thread
From: Peter Zotov @ 2014-09-30 2:28 UTC (permalink / raw)
To: Milan Stanojević; +Cc: Caml List, caml-list-request
On 2014-09-30 06:15, Milan Stanojević wrote:
> Firefox is complaining about ocaml.org's certificate issuer, says
> "unknown issuer".
> Chromium doesn't complain and allows me to open ocaml.org.
>
> It's possible my configuration is messed up.
> Anyone else having this problem?
Let me try to guess--do you use Windows XP?
--
Peter Zotov
^ permalink raw reply [flat|nested] 3+ messages in thread
* RE: [Caml-list] ocaml.org ssl certificate problem
2014-09-30 2:15 [Caml-list] ocaml.org ssl certificate problem Milan Stanojević
2014-09-30 2:28 ` Peter Zotov
@ 2014-09-30 7:31 ` David Allsopp
1 sibling, 0 replies; 3+ messages in thread
From: David Allsopp @ 2014-09-30 7:31 UTC (permalink / raw)
To: Caml List
Milan Stanojevic wrote:
> Firefox is complaining about ocaml.org's certificate issuer, says "unknown
> issuer".
> Chromium doesn't complain and allows me to open ocaml.org.
>
> It's possible my configuration is messed up.
> Anyone else having this problem?
It looks like ocaml.org's SSL is not correctly configured and it's not sending the intermediate CA certificate (see output of http://www.ssltool.com/?action=sslCheckOpenSSL&address=ocaml.org). The intermediate CA certificate is at http://wiki.gandi.net/en/ssl/intermediate, by the look of it.
This will be a problem viewing in an evangelical browser like Firefox which doesn't include a stash of common intermediate CA certificates, but not so much of a problem in Chromium (especially if you do happen to be running on Windows, where it uses Microsoft's built-in certificate store) which is a little more liberal - or less liberal, depending on political viewpoint! - about the certificates it pre-installs for you!
However, it will have problems in Chromium later this year when SHA1 starts to be retired: http://googleonlinesecurity.blogspot.co.uk/2014/09/gradually-sunsetting-sha-1.html
David
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2014-09-30 7:32 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2014-09-30 2:15 [Caml-list] ocaml.org ssl certificate problem Milan Stanojević
2014-09-30 2:28 ` Peter Zotov
2014-09-30 7:31 ` David Allsopp
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).