VeriSign Class 3 Secure Server CA - Error

Forums » General Opera topics » Security and privacy in Opera

You need to be logged in to post in the forums. If you do not have an account, please sign up first.

Go to last post

23. May 2010, 08:36:53

essuma

Posts: 3

VeriSign Class 3 Secure Server CA - Error

Hi guys!

Hope I'm not posting something discussed before, tried looking, but nothing I found made any sens to me.

Ok, heres the problem.
When I visit different sits this waring pops up, disappear right away and pops up again a number of times.

some error.png

Does someone know what this is or can help me fix it?

Espen

23. May 2010, 13:19:11

yngve

Senior Developer

Posts: 2975

Secure.adviva.net was until recently using a certificate issued from Versisign's G2 Root (which is known to Opera), but had not installed one of the certificates needed by some browsers, the Intermediate CA certificate. Due to a recent regression in Opera, Opera was not able to automatically retrieve the missing certificate, and therefore displayed this warning. There is a fix in the pipeline.

The site has now changed its certificate to one issued by Thawte (which is owned by Verisign).
Sincerely,
Yngve N. Pettersen

24. May 2010, 14:41:36

essuma

Posts: 3

What do you mean with: "There is a fix in the pipeline" ?

And you say that: "The site has now changed its certificate to one issued by Thawte (which is owned by Verisign)"
Does that mean that you guys at opera has fixed the problem? I'm still getting the same waring, last time just a couple of minutes ago...

24. May 2010, 15:23:46 (edited)

yngve

Senior Developer

Posts: 2975

Originally posted by essuma:

What do you mean with: "There is a fix in the pipeline" ?


That a fix for the problem has been sent to the desktop team. It may or may not already be included in 10.54.


No

Originally posted by essuma:

And you say that: "The site has now changed its certificate to one issued by Thawte (which is owned by Verisign)"
Does that mean that you guys at opera has fixed the problem?



No, it means that the web site administrator for adviva.net fixed their server to use a different certificate, at least as far as I can tell from Norway.

Update: They have multiple servers with different IP addresses, configured with multiple certificates from different CAs. That is a substandard way to organize secure servers since it is likely to trigger extra load on the server due to repeated full negotiations.

Originally posted by essuma:

I'm still getting the same waring



Same hostname, same missing issuer? (Details are in one of the panels of the dialog)
Sincerely,
Yngve N. Pettersen

1. June 2010, 15:42:13

essuma

Posts: 3

Yes, its the same hostname..I think.. Here are the three panels of the dialog:
advarsel.png
Sikkerhet.png
detaljer.png

1. June 2010, 16:25:20

yngve

Senior Developer

Posts: 2975

As I mentioned above, adviva is using 4 different server locations (IP addresses), with at least two different certificates. Depending on which server you get connected to, based on DNS response sorting, you can get randomly connected to the badly configured one(s). I have reported the problem to the issuer.
Sincerely,
Yngve N. Pettersen

Forums » General Opera topics » Security and privacy in Opera