Re: [tor-talk] Invalid Server Certificate accessing torproject.org on Chrome/Windows

2012-03-21 Thread Pascal
Though the cert chain for www.torproject.org is now fixed on 38.229.72.14 and 38.229.72.16, it is still broken on 86.59.30.36. -Pascal On 1/4/2012 8:51 PM, Andrew Lewman wrote: I think this is fixed for www.torproject.org now. Digicert apparently updated their ca chained certs at some point.

Re: [tor-talk] Invalid Server Certificate accessing torproject.org on Chrome/Windows

2012-01-05 Thread Ondrej Mikle
On 01/05/12 05:18, Greg wrote: Hi Andrew, Thank you for taking a stab at this issue! I just tried this now, and it still doesn't work. I don't remember precisely what the chain looked, so I can't be sure I'm seeing anything different at all. I restarted Chrome (but not Windows). Both

Re: [tor-talk] Invalid Server Certificate accessing torproject.org on Chrome/Windows

2012-01-05 Thread Greg
Hey Ondrej, Here's some info from msinfo32: OS Name Microsoft(R) Windows(R) Server 2003, Enterprise EditionVersion 5.2.3790 Service Pack 2 Build 3790OS ManufacturerMicrosoft Corporation System Manufacturer MSI System ModelMS-7350System Type X86-based PCProcessor x86 Family 6

Re: [tor-talk] Invalid Server Certificate accessing torproject.org on Chrome/Windows

2012-01-05 Thread Nick Mathewson
On Wed, Jan 4, 2012 at 9:51 PM, Andrew Lewman and...@torproject.org wrote: I think this is fixed for www.torproject.org now. Digicert apparently updated their ca chained certs at some point. I've put the updated ca-certs on the www servers. If this works, we can update them on all torproject

Re: [tor-talk] Invalid Server Certificate accessing torproject.org on Chrome/Windows

2012-01-05 Thread Koh Choon Lin
Hi On Wed, Jan 4, 2012 at 2:40 PM, Greg g...@alumni.brown.edu wrote: Hi, I searched google for people having problems accessing torproject.org from Chrome on Windows, but I didn't see much besides a discussion on December 21 about an outage

Re: [tor-talk] Invalid Server Certificate accessing torproject.org on Chrome/Windows

2012-01-05 Thread Koh Choon Lin
Hi On Fri, Jan 6, 2012 at 10:18 AM, Greg g...@alumni.brown.edu wrote: Great! I will try this out when I get home today.  That link says to install the hotfix located here: http://support.microsoft.com/default.aspx?scid=kb;EN-US;938397 Thanks, Greg 2012/1/5 Ondrej Mikle

Re: [tor-talk] Invalid Server Certificate accessing torproject.org on Chrome/Windows

2012-01-04 Thread Pascal
Running www.digicert.com through that tool shows the 2nd intermediate certificate that needs to be included. -Pascal On 1/4/2012 2:21 PM, Pascal wrote: The tool at http://www.digicert.com/help/ does a good job of showing what is going on with a web site's certs. Traditionally a website is

Re: [tor-talk] Invalid Server Certificate accessing torproject.org on Chrome/Windows

2012-01-04 Thread Ondrej Mikle
On 01/04/12 07:40, Greg wrote: Hi, I searched google for people having problems accessing torproject.org from Chrome on Windows, but I didn't see much besides a discussion on December 21 about an outage (http://comments.gmane.org/gmane.network.tor.general/2514). I can access torproject.org from

Re: [tor-talk] Invalid Server Certificate accessing torproject.org on Chrome/Windows

2012-01-04 Thread Ondrej Mikle
On 01/04/12 21:30, Pascal wrote: Running www.digicert.com through that tool shows the 2nd intermediate certificate that needs to be included. Their tool is quite good, but not all-powerful. The suggested 2nd intermediate certificate must have subject CN=DigiCert High Assurance EV Root CA.

Re: [tor-talk] Invalid Server Certificate accessing torproject.org on Chrome/Windows

2012-01-04 Thread Andrew Lewman
I think this is fixed for www.torproject.org now. Digicert apparently updated their ca chained certs at some point. I've put the updated ca-certs on the www servers. If this works, we can update them on all torproject servers. And for fun, I've attached the gnutls-cli output of the old cert in

Re: [tor-talk] Invalid Server Certificate accessing torproject.org on Chrome/Windows

2012-01-04 Thread Greg
Hi Andrew, Thank you for taking a stab at this issue! I just tried this now, and it still doesn't work. I don't remember precisely what the chain looked, so I can't be sure I'm seeing anything different at all. I restarted Chrome (but not Windows). Both www.torproject.org and

[tor-talk] Invalid Server Certificate accessing torproject.org on Chrome/Windows

2012-01-03 Thread Greg
Hi, I searched google for people having problems accessing torproject.org from Chrome on Windows, but I didn't see much besides a discussion on December 21 about an outage (http://comments.gmane.org/gmane.network.tor.general/2514). I can access torproject.org from Firefox on my windows (server