[RndTbl] Roundtable Digest, Vol 119, Issue 2

Fri Nov 21 14:30:13 CST 2014

Using Opera, the site gives a message:

The certificate for "Entrust Certification Authority - L1K" is signed by the
unknown Certificate Authority "Entrust Root Certification Authority - G2". It is
not possible to verify that this is a valid certificate.

Cheers,
Michael
On 14-11-21 12:00 PM, roundtable-request at muug.mb.ca wrote:
> Send Roundtable mailing list submissions to
> 	roundtable at muug.mb.ca
>
> To subscribe or unsubscribe via the World Wide Web, visit
> 	http://www.muug.mb.ca/mailman/listinfo/roundtable
> or, via email, send a message with subject or body 'help' to
> 	roundtable-request at muug.mb.ca
>
> You can reach the person managing the list at
> 	roundtable-owner at muug.mb.ca
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of Roundtable digest..."
>
>
> Today's Topics:
>
>     1. weird cert problem (Trevor Cordes)
>     2. Re: weird cert problem (Hartmut W Sager)
>     3. Re: weird cert problem (Gilles Detillieux)
>     4. Re: weird cert problem (Gilles Detillieux)
>
>
> ----------------------------------------------------------------------
>
> Message: 1
> Date: Fri, 21 Nov 2014 00:14:00 -0600
> From: Trevor Cordes <trevor at tecnopolis.ca>
> To: MUUG RndTbl <roundtable at muug.mb.ca>
> Subject: [RndTbl] weird cert problem
> Message-ID: <20141121001400.2528e690 at pog.tecnopolis.ca>
> Content-Type: text/plain; charset=US-ASCII
>
> Does anyone else get a cert error on this site:
>
> https://taxcess.gov.mb.ca/
>
> It's invalid in Firefox (latest F19 version: 33.1, just came out today)
> on Linux. But it works ok on Chrome in Windows.  Chrome shows the cert
> is brand new this month (I had never had a problem with their site
> before).
>
> Weird that a trust-validated site like that would have cert problems,
> unless they chose a no-name CA?
>
> Unless someone is MitM'ing me...
>
>
> ------------------------------
>
> Message: 2
> Date: Fri, 21 Nov 2014 00:24:54 -0600
> From: Hartmut W Sager <hwsager at marityme.net>
> To: Continuation of Round Table discussion <roundtable at muug.mb.ca>
> Subject: Re: [RndTbl] weird cert problem
> Message-ID:
> 	<CAGQr3cUs_WSN+HAEVFHh+0TZ-VtzAc5ve0Noo2-r_pv2g+SJVQ at mail.gmail.com>
> Content-Type: text/plain; charset="utf-8"
>
> I just tested it, and I also get the "untrusted" treatment, using Windows
> Vista and Firefox 33.1.1 (which is a Firefox upgrade I just got in the last
> 2-3 days).
>
> Hartmut W Sager - Tel +1-204-339-8331
>
>
> On 21 November 2014 00:14, Trevor Cordes <trevor at tecnopolis.ca> wrote:
>
>> Does anyone else get a cert error on this site:
>>
>> https://taxcess.gov.mb.ca/
>>
>> It's invalid in Firefox (latest F19 version: 33.1, just came out today)
>> on Linux. But it works ok on Chrome in Windows.  Chrome shows the cert
>> is brand new this month (I had never had a problem with their site
>> before).
>>
>> Weird that a trust-validated site like that would have cert problems,
>> unless they chose a no-name CA?
>>
>> Unless someone is MitM'ing me...
>> _______________________________________________
>> Roundtable mailing list
>> Roundtable at muug.mb.ca
>> http://www.muug.mb.ca/mailman/listinfo/roundtable
>>
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL: <http://www.muug.mb.ca/pipermail/roundtable/attachments/20141121/8db4f647/attachment-0001.html>
>
> ------------------------------
>
> Message: 3
> Date: Fri, 21 Nov 2014 06:17:08 -0600
> From: Gilles Detillieux <grdetil at scrc.umanitoba.ca>
> To: roundtable at muug.mb.ca
> Subject: Re: [RndTbl] weird cert problem
> Message-ID: <546F2D44.3050808 at scrc.umanitoba.ca>
> Content-Type: text/plain; charset="windows-1252"; Format="flowed"
>
> I get an error too with Firefox 30.0 and Firefox 33.1.1 on Windows 7,
> but not with Firefox ESR 31.2.0 on RHEL 5, nor with IE 11 on Win7.  With
> FF 30.0, it didn't even give me a chance to look at the cert or add an
> exception, but after updating to 33.1.1 I could. It's an Entrust, Inc.
> certificate, which doesn't seem like a no-name CA to me, particularly
> since many browsers accept it without complaint.  Maybe some Windows
> builds of Firefox are missing some root CAs or have a bug that prevent
> them from parsing all of the root CAs correctly?  Doesn't look like a
> MitM attack in any case.
>
> On 11/21/2014 12:24 AM, Hartmut W Sager wrote:
>> I just tested it, and I also get the "untrusted" treatment, using
>> Windows Vista and Firefox 33.1.1 (which is a Firefox upgrade I just
>> got in the last 2-3 days).
>>
>> Hartmut W Sager - Tel +1-204-339-8331
>>
>>
>> On 21 November 2014 00:14, Trevor Cordes <trevor at tecnopolis.ca
>> <mailto:trevor at tecnopolis.ca>> wrote:
>>
>>      Does anyone else get a cert error on this site:
>>
>>      https://taxcess.gov.mb.ca/
>>
>>      It's invalid in Firefox (latest F19 version: 33.1, just came out
>>      today)
>>      on Linux. But it works ok on Chrome in Windows.  Chrome shows the cert
>>      is brand new this month (I had never had a problem with their site
>>      before).
>>
>>      Weird that a trust-validated site like that would have cert problems,
>>      unless they chose a no-name CA?
>>
>>      Unless someone is MitM'ing me...
>>
>>

-- 
------------------------------------------------------------------
Michael Doob                    Telephone: (204) 474-9796
Department of Mathematics       Fax: (204) 474-7606
University of Manitoba          email: Michael_Doob at umanitoba.ca
Winnipeg, MB, Canada R3T 2N2
------------------------------------------------------------------