You need to be logged in to post in the forums. If you do not have an account, please sign up first.
VeriSign Class 3 Secure Server CA - Error
Hi guys!Hope I'm not posting something discussed before, tried looking, but nothing I found made any sens to me.
Ok, heres the problem.
When I visit different sits this waring pops up, disappear right away and pops up again a number of times.
some error.png
Does someone know what this is or can help me fix it?
Espen
Secure.adviva.net was until recently using a certificate issued from Versisign's G2 Root (which is known to Opera), but had not installed one of the certificates needed by some browsers, the Intermediate CA certificate. Due to a recent regression in Opera, Opera was not able to automatically retrieve the missing certificate, and therefore displayed this warning. There is a fix in the pipeline.
The site has now changed its certificate to one issued by Thawte (which is owned by Verisign).
The site has now changed its certificate to one issued by Thawte (which is owned by Verisign).
Sincerely,
Yngve N. Pettersen
Yngve N. Pettersen
What do you mean with: "There is a fix in the pipeline" ?
And you say that: "The site has now changed its certificate to one issued by Thawte (which is owned by Verisign)"
Does that mean that you guys at opera has fixed the problem? I'm still getting the same waring, last time just a couple of minutes ago...
And you say that: "The site has now changed its certificate to one issued by Thawte (which is owned by Verisign)"
Does that mean that you guys at opera has fixed the problem? I'm still getting the same waring, last time just a couple of minutes ago...
24. May 2010, 15:23:46 (edited)
Originally posted by essuma:
What do you mean with: "There is a fix in the pipeline" ?
That a fix for the problem has been sent to the desktop team. It may or may not already be included in 10.54.
No
Originally posted by essuma:
And you say that: "The site has now changed its certificate to one issued by Thawte (which is owned by Verisign)"
Does that mean that you guys at opera has fixed the problem?
No, it means that the web site administrator for adviva.net fixed their server to use a different certificate, at least as far as I can tell from Norway.
Update: They have multiple servers with different IP addresses, configured with multiple certificates from different CAs. That is a substandard way to organize secure servers since it is likely to trigger extra load on the server due to repeated full negotiations.
Originally posted by essuma:
I'm still getting the same waring
Same hostname, same missing issuer? (Details are in one of the panels of the dialog)
Sincerely,
Yngve N. Pettersen
Yngve N. Pettersen
Yes, its the same hostname..I think.. Here are the three panels of the dialog:
advarsel.png
Sikkerhet.png
detaljer.png
advarsel.png
Sikkerhet.png
detaljer.png
As I mentioned above, adviva is using 4 different server locations (IP addresses), with at least two different certificates. Depending on which server you get connected to, based on DNS response sorting, you can get randomly connected to the badly configured one(s). I have reported the problem to the issuer.
Sincerely,
Yngve N. Pettersen
Yngve N. Pettersen
Forums » General Opera topics » Security and privacy in Opera