Certificate errors with Thawte SGC CA

Forums » General Opera topics » Security and privacy in Opera

You need to be logged in to post in the forums. If you do not have an account, please sign up first.

Go to last post

26. May 2010, 17:51:41

alexs

Posts: 1184

Certificate errors with Thawte SGC CA

Hi,

When i visit http://kurier.at/nachrichten/2004098.php Opera warning with 2-3 Certificate errors.

The certificate for "community.kurier.at" is a signend by the
unknow Certificate Authority "Thawte SGC CA". It is not
possible to verify that this is a valide cerificate

Holder: community.kurier.at
Issuer: Thawte SGC CA, Thawte Consuliting


Thawte is unauthorized?

Certificate-kurier.png

Opera 10.54 Internal, build 6340
Karstens Opera-Info Forum | SearchEdit – search.ini Editor | spiegel.de wide content Erweiterung

26. May 2010, 20:38:13

yngve

Senior Developer

Posts: 2975

No, but the server is incorrectly configured by not sending the Verisign issued intermediate certificate called "Thawte SGC CA" (it is not a Root).

A bug in Opera 10.5 prevents it from correctly retrieving the missing certificate automatically; it's been recently fixed in 10.54, therefore there is no way to chain the certificate to the issuing Verisign Root.
Sincerely,
Yngve N. Pettersen

26. May 2010, 21:18:50

ytsmabeer

Frisian translator of Stuff

Posts: 1898

Originally posted by yngve:

it's been recently fixed in 10.54, therefore there is no way to chain the certificate to the issuing Verisign Root.


Yngve is it fixed in the latest snapshots? I see the problem too and use 10.54

31. May 2010, 16:26:12

alexs

Posts: 1184

Originally posted by yngve:

A bug in Opera 10.5 prevents it from correctly retrieving the missing certificate automatically; it's been recently fixed in 10.54, therefore there is no way to chain the certificate to the issuing Verisign Root.


Not fixed in Opera 10.60 build 6344… → http://kurier.at/nachrichten/2005302.php
Karstens Opera-Info Forum | SearchEdit – search.ini Editor | spiegel.de wide content Erweiterung

13. June 2010, 12:55:47

alexs

Posts: 1184

Not fixed in latest snapshot (Linux build 635)…
Karstens Opera-Info Forum | SearchEdit – search.ini Editor | spiegel.de wide content Erweiterung

14. June 2010, 12:19:49

Moderator

olli

Posts: 1460

Can you guys try the latest snapshot? http://my.opera.com/desktopteam/blog/2010/06/14/html5-and-then-some
Try out Vivaldi.net for new forums, photo-sharing and web-mail
http://www.vivaldi.net
Made for community, not quarterly reports

14. June 2010, 14:02:29 (edited)

alexs

Posts: 1184

Originally posted by olli:

Can you guys try the latest snapshot? http://my.opera.com/desktopteam/blog/2010/06/14/html5-and-then-some


not fixed in build 6363 (testing with "opera -pd opera_test") certificatopera.png
http://kurier.at/sport/fussballwm/2008729.php
Karstens Opera-Info Forum | SearchEdit – search.ini Editor | spiegel.de wide content Erweiterung

14. June 2010, 16:59:38

yngve

Senior Developer

Posts: 2975

This is no longer related to the AIA problem that is fixed in 10.60

There seem to be an additional problem with downloaded copy of the missing intermediate certificate; our certificate decoder (OpenSSL) refuses to decode the certificate, apparently due to a missing field. At present I do not know where the problem is located.
Sincerely,
Yngve N. Pettersen

14. June 2010, 17:29:56

yngve

Senior Developer

Posts: 2975

I think I found the problem: The CA identifies the missing certificate as HTML content, which leads to a decode error.
Sincerely,
Yngve N. Pettersen

25. June 2010, 20:48:31

alexs

Posts: 1184

sorry yngve, but not fixed in Linux build 6383.
Karstens Opera-Info Forum | SearchEdit – search.ini Editor | spiegel.de wide content Erweiterung

30. June 2010, 17:14:29

yngve

Senior Developer

Posts: 2975

The CA has now fixed the issue on the server, so in combination with the AIA fix that is in 10.60beta, the site is now working in 10.60
Sincerely,
Yngve N. Pettersen

30. June 2010, 17:20:29

alexs

Posts: 1184

Thank you yngve yes
Karstens Opera-Info Forum | SearchEdit – search.ini Editor | spiegel.de wide content Erweiterung

Forums » General Opera topics » Security and privacy in Opera