Re: [tdf-discuss] Re: Ping Florian - StartCom Certs
Hi, RGB ES wrote on 2011-02-26 14.58: I get a certification error with konqueror, but not with firefox for https://www.libreoffice.org/. Same forhttps://bugs.freedesktop.org/ might be because Konqueror does not know about the StartSSL Root CA which we use - it should work at least in Firefox, IE, Chrome, SeaMonkey and Safari. :-) Florian -- Florian Effenberger flo...@documentfoundation.org Steering Committee and Founding Member of The Document Foundation Tel: +49 8341 99660880 | Mobile: +49 151 14424108 Skype: floeff | Twitter/Identi.ca: @floeff :: LibreOffice needs your support for setting up its Foundation! :: Join our fundraising at http://challenge.documentfoundation.org -- Unsubscribe instructions: E-mail to discuss+h...@documentfoundation.org Archive: http://listarchives.documentfoundation.org/www/discuss/ *** All posts to this list are publicly archived for eternity ***
Re: [tdf-discuss] Re: Ping Florian - StartCom Certs
2011/2/27 Florian Effenberger flo...@documentfoundation.org Hi, RGB ES wrote on 2011-02-26 14.58: I get a certification error with konqueror, but not with firefox for https://www.libreoffice.org/. Same forhttps://bugs.freedesktop.org/ might be because Konqueror does not know about the StartSSL Root CA which we use - it should work at least in Firefox, IE, Chrome, SeaMonkey and Safari. :-) Florian Interesting ! I checked this out in FF, Chromium, and Opera and at first glance everything looked fine. However, that latest Opera contains a feature that allows one to check security information with respect to a website, and under the «Security» tab, I see the following (my translation from the Swedish) : * This web site is not secure.* The connexion to www.libreoffice.org is not secure and should not be used to transmit sensitive information. The server attempted to activate security functions but failed. The above notice is followed by a so-called «certificate summary», as follows : Owner : *.libreoffice.org, Florian Effenberger Issuer : StartCom Class2 Primary Intermediate Server, CA StartCom Ltd. Expires : 2012-12-27 01.37.00 GMT Encryption protocol : TLS v1.0 256 bit AES (1024 bit DHE_RSA/SHA) Henri -- Unsubscribe instructions: E-mail to discuss+h...@documentfoundation.org Archive: http://listarchives.documentfoundation.org/www/discuss/ *** All posts to this list are publicly archived for eternity ***
Re: [tdf-discuss] Re: Ping Florian - StartCom Certs
Hi, M Henri Day wrote on 2011-02-27 16.10: Interesting ! I checked this out in FF, Chromium, and Opera and at first glance everything looked fine. However, that latest Opera contains a feature that allows one to check security information with respect to a website, and under the «Security» tab, I see the following (my translation from the Swedish) : * This web site is not secure.* The connexion to www.libreoffice.org is not secure and should not be used to transmit sensitive information. The server attempted to activate security functions but failed. do you see the same message if you open https://www.libreoffice.org/admin/ ? Thanks, Florian -- Florian Effenberger flo...@documentfoundation.org Steering Committee and Founding Member of The Document Foundation Tel: +49 8341 99660880 | Mobile: +49 151 14424108 Skype: floeff | Twitter/Identi.ca: @floeff :: LibreOffice needs your support for setting up its Foundation! :: Join our fundraising at http://challenge.documentfoundation.org -- Unsubscribe instructions: E-mail to discuss+h...@documentfoundation.org Archive: http://listarchives.documentfoundation.org/www/discuss/ *** All posts to this list are publicly archived for eternity ***
Re: [tdf-discuss] Re: Ping Florian - StartCom Certs
2011/2/27 Florian Effenberger flo...@documentfoundation.org Hi, M Henri Day wrote on 2011-02-27 16.10: Interesting ! I checked this out in FF, Chromium, and Opera and at first glance everything looked fine. However, that latest Opera contains a feature that allows one to check security information with respect to a website, and under the «Security» tab, I see the following (my translation from the Swedish) : * This web site is not secure.* The connexion to www.libreoffice.org is not secure and should not be used to transmit sensitive information. The server attempted to activate security functions but failed. do you see the same message if you open https://www.libreoffice.org/admin/? Thanks, Florian No, Florian, when I type that sequence into the address bar, I'm redirected to «https://www.libreoffice.org/Security/login?BackURL=%2Fadmin%2F» and a padlock symbol is shown to the left. When I click on the latter, I'm informed both that the connexion is secure and that the website has an «impeccable» security history - a description I much appreciated. In order to log onto the above page, I was instructed to «[p]lease choose an authentication method and enter your credentials to access the CMS» ; when I then attempted to do so using my email address and my registration password for the LibreOffice forum, I was rejected, which is, I presume, precisely as it should be, given that I am not an LO adminstrator Henri -- Unsubscribe instructions: E-mail to discuss+h...@documentfoundation.org Archive: http://listarchives.documentfoundation.org/www/discuss/ *** All posts to this list are publicly archived for eternity ***
[tdf-discuss] Re: Ping Florian - StartCom Certs
On 02/27/2011 07:10 AM, M Henri Day wrote: ... Interesting ! I checked this out in FF, Chromium, and Opera and at first glance everything looked fine. However, that latest Opera contains a feature that allows one to check security information with respect to a website, and under the «Security» tab, I see the following (my translation from the Swedish) : * This web site is not secure.* The connexion to www.libreoffice.org is not secure and should not be used to transmit sensitive information. The server attempted to activate security functions but failed. The above notice is followed by a so-called «certificate summary», as follows : Owner : *.libreoffice.org, Florian Effenberger Issuer : StartCom Class2 Primary Intermediate Server, CA StartCom Ltd. Expires : 2012-12-27 01.37.00 GMT Encryption protocol : TLS v1.0 256 bit AES (1024 bit DHE_RSA/SHA) Henri That's OK as it is pulling the images from an http vs http: http://www.libreoffice.org/assets/resized_screenshots_avoid/Screenshot-12.png In other words, its mixed only 'partially' secure. If you try https://www.libreoffice.org/download/ that page should show the security lock. And if you check the security (Tools|Advanced|Page Security Info) you should see: The connection to www.libreoffice.org is secure. Opera/9.80 (X11; Linux i686; U; en) Presto/2.7.62 Version/11.01 The issue, at this point, is with SeaMonkey (linux) Konquer. If I try on SeaMonkey Windows 2.1b2 it's fine: http://img402.imageshack.us/f/seamonkeycertwindows1.png/ I've posted on the SeaMonkey dev group to see I someone there can figure out the issue. Gary -- Unsubscribe instructions: E-mail to discuss+h...@documentfoundation.org Archive: http://listarchives.documentfoundation.org/www/discuss/ *** All posts to this list are publicly archived for eternity ***
Re: [tdf-discuss] Re: Ping Florian - StartCom Certs
2011/2/27 NoOp gl...@sbcglobal.net On 02/27/2011 07:10 AM, M Henri Day wrote: ... Interesting ! I checked this out in FF, Chromium, and Opera and at first glance everything looked fine. However, that latest Opera contains a feature that allows one to check security information with respect to a website, and under the «Security» tab, I see the following (my translation from the Swedish) : * This web site is not secure.* The connexion to www.libreoffice.org is not secure and should not be used to transmit sensitive information. The server attempted to activate security functions but failed. The above notice is followed by a so-called «certificate summary», as follows : Owner : *.libreoffice.org, Florian Effenberger Issuer : StartCom Class2 Primary Intermediate Server, CA StartCom Ltd. Expires : 2012-12-27 01.37.00 GMT Encryption protocol : TLS v1.0 256 bit AES (1024 bit DHE_RSA/SHA) Henri That's OK as it is pulling the images from an http vs http: http://www.libreoffice.org/assets/resized_screenshots_avoid/Screenshot-12.png In other words, its mixed only 'partially' secure. Not quite sure what you mean by «pulling the images from an http vs http» here, Gary, as the address for which the anomalous security ratings is shown is, in fact, «https://www.libreoffice.org/», i e, a https address. In any event, I still get the above messages for «https://www.libreoffice.org/» on Opera If you try https://www.libreoffice.org/download/ that page should show the security lock. And if you check the security (Tools|Advanced|Page Security Info) you should see: The connection to www.libreoffice.org is secure. Opera/9.80 (X11; Linux i686; U; en) Presto/2.7.62 Version/11.01 That was indeed the case on Opera 11.01 on my 64-bit Ubuntu 10.10 setup The issue, at this point, is with SeaMonkey (linux) Konquer. If I try on SeaMonkey Windows 2.1b2 it's fine: http://img402.imageshack.us/f/seamonkeycertwindows1.png/ I've posted on the SeaMonkey dev group to see I someone there can figure out the issue. Gary -- Unsubscribe instructions: E-mail to discuss+h...@documentfoundation.org Archive: http://listarchives.documentfoundation.org/www/discuss/ *** All posts to this list are publicly archived for eternity *** Archived for eternity ! Not bad - I'd settle for half of that ! Henri -- Unsubscribe instructions: E-mail to discuss+h...@documentfoundation.org Archive: http://listarchives.documentfoundation.org/www/discuss/ *** All posts to this list are publicly archived for eternity ***
[tdf-discuss] Re: Ping Florian - StartCom Certs
Hi, NoOp wrote on 2011-02-25 22.42: Added note: you can reproduce if you use https://www.libreoffice.org/ hm, I still cannot reproduce you. So, you say if you open https://www.libreoffice.org you get a certification error? Anyone else can confirm? I just tried it with Chrome, Firefox, Opera and Safari, to no avail. Florian -- Florian Effenberger flo...@documentfoundation.org Steering Committee and Founding Member of The Document Foundation Tel: +49 8341 99660880 | Mobile: +49 151 14424108 Skype: floeff | Twitter/Identi.ca: @floeff :: LibreOffice needs your support for setting up its Foundation! :: Join our fundraising at http://challenge.documentfoundation.org -- Unsubscribe instructions: E-mail to discuss+h...@documentfoundation.org Archive: http://listarchives.documentfoundation.org/www/discuss/ *** All posts to this list are publicly archived for eternity ***
Re: [tdf-discuss] Re: Ping Florian - StartCom Certs
On 2/26/2011 1:59 PM, Florian Effenberger wrote: Hi, NoOp wrote on 2011-02-25 22.42: Added note: you can reproduce if you use https://www.libreoffice.org/ hm, I still cannot reproduce you. So, you say if you open https://www.libreoffice.org you get a certification error? Anyone else can confirm? I just tried it with Chrome, Firefox, Opera and Safari, to no avail. Florian This doesnt occur for me will test again on mac, when im on it later. -- Unsubscribe instructions: E-mail to discuss+h...@documentfoundation.org Archive: http://listarchives.documentfoundation.org/www/discuss/ *** All posts to this list are publicly archived for eternity ***
Re: [tdf-discuss] Re: Ping Florian - StartCom Certs
I get a certification error with konqueror, but not with firefox for https://www.libreoffice.org/. Same for https://bugs.freedesktop.org/ 2011/2/26 Jonathan Aquilina eagles051...@gmail.com: On 2/26/2011 1:59 PM, Florian Effenberger wrote: Hi, NoOp wrote on 2011-02-25 22.42: Added note: you can reproduce if you use https://www.libreoffice.org/ hm, I still cannot reproduce you. So, you say if you open https://www.libreoffice.org you get a certification error? Anyone else can confirm? I just tried it with Chrome, Firefox, Opera and Safari, to no avail. Florian This doesnt occur for me will test again on mac, when im on it later. -- Unsubscribe instructions: E-mail to discuss+h...@documentfoundation.org Archive: http://listarchives.documentfoundation.org/www/discuss/ *** All posts to this list are publicly archived for eternity *** -- Unsubscribe instructions: E-mail to discuss+h...@documentfoundation.org Archive: http://listarchives.documentfoundation.org/www/discuss/ *** All posts to this list are publicly archived for eternity ***
[tdf-discuss] Re: Ping Florian - StartCom Certs
On 02/25/2011 12:30 PM, Florian Effenberger wrote: Which site did you open? Seems to work here? NoOp wrote on 2011-02-25 21.25: Florian, you need to update the new StartCom Certs to include libreoffice.org. http://www.libreoffice.org/ Click on Download http://www.libreoffice.org/download/ Now click on Downloading Instructions http://www.libreoffice.org/download/instructions/ Now scroll down to: When finished downloading, please read the installation instructions. Odd. I can't get it to repeat on another tab. I still have the tab opened with the problem will post some screenshots in a few moments. -- Unsubscribe instructions: E-mail to discuss+h...@documentfoundation.org Archive: http://listarchives.documentfoundation.org/www/discuss/ *** All posts to this list are publicly archived for eternity ***
[tdf-discuss] Re: Ping Florian - StartCom Certs
On 02/25/2011 12:42 PM, NoOp wrote: On 02/25/2011 12:30 PM, Florian Effenberger wrote: Which site did you open? Seems to work here? NoOp wrote on 2011-02-25 21.25: Florian, you need to update the new StartCom Certs to include libreoffice.org. http://www.libreoffice.org/ Click on Download http://www.libreoffice.org/download/ Now click on Downloading Instructions http://www.libreoffice.org/download/instructions/ Now scroll down to: When finished downloading, please read the installation instructions. Odd. I can't get it to repeat on another tab. I still have the tab opened with the problem will post some screenshots in a few moments. http://img638.imageshack.us/f/screenshot6z.png/ On the tab with that page open and this url: http://www.libreoffice.org/get-help/installation/linux/ if I right click on 'Installation' I get this url: https://www.libreoffice.org/get-help/installation/ The https is the one that is causing the cert alert. In fact, looking at all links show https vs http. As to why I'm getting https links from the original www.libreoffice.org page is a mystery to me. But I'll keep that tab opened see if I can figure out why. -- Unsubscribe instructions: E-mail to discuss+h...@documentfoundation.org Archive: http://listarchives.documentfoundation.org/www/discuss/ *** All posts to this list are publicly archived for eternity ***
[tdf-discuss] Re: Ping Florian - StartCom Certs
On 02/25/2011 01:12 PM, NoOp wrote: ... http://img638.imageshack.us/f/screenshot6z.png/ On the tab with that page open and this url: http://www.libreoffice.org/get-help/installation/linux/ if I right click on 'Installation' I get this url: https://www.libreoffice.org/get-help/installation/ The https is the one that is causing the cert alert. In fact, looking at all links show https vs http. Sorry, forgot the link to the shot showing the cert alert: http://img841.imageshack.us/f/screenshot5di.png/ -- Unsubscribe instructions: E-mail to discuss+h...@documentfoundation.org Archive: http://listarchives.documentfoundation.org/www/discuss/ *** All posts to this list are publicly archived for eternity ***
[tdf-discuss] Re: Ping Florian - StartCom Certs
On 02/25/2011 01:14 PM, NoOp wrote: On 02/25/2011 01:12 PM, NoOp wrote: ... http://img638.imageshack.us/f/screenshot6z.png/ On the tab with that page open and this url: http://www.libreoffice.org/get-help/installation/linux/ if I right click on 'Installation' I get this url: https://www.libreoffice.org/get-help/installation/ The https is the one that is causing the cert alert. In fact, looking at all links show https vs http. Sorry, forgot the link to the shot showing the cert alert: http://img841.imageshack.us/f/screenshot5di.png/ Added note: you can reproduce if you use https://www.libreoffice.org/ -- Unsubscribe instructions: E-mail to discuss+h...@documentfoundation.org Archive: http://listarchives.documentfoundation.org/www/discuss/ *** All posts to this list are publicly archived for eternity ***
