Re: Intro
| From: | Hannes Magnusson | Date: | Thu, 14 Aug 2014 17:59:48 +0000 |
| Subject: | Re: Intro | ||
| References: | 1 2 3 4 5 | Groups: | php.webmaster |
| Request: | Send a blank email to php-webmaster+get-19679@lists.php.net to get a copy of this message | ||
Maciej: Noo... that was not a known problem.
Ferenc: yep, good guess.
Fixed.
-Hannes
On Wed, Aug 13, 2014 at 1:30 AM, Ferenc Kovacs <tyra3l@gmail.com> wrote:
>
>
>
> On Wed, Aug 13, 2014 at 7:56 AM, Maciej Sobaczewski <sobak@php.net> wrote:
>>
>>
>>> Anyone else getting an SSL warning?
>>>
>>> I'm on my phone, so could be user error on my part, but thought it worth
>>> bringing up regardless, just in case.
>>>
>>
>> There is a known problem with wiki's certificate and Android mobile
>> browsers. I saw reddit users complaining about it. In other words: I can
>> confirm this bug but I don't know a reason.
>>
>> Cheers,
>> Maciej.
>>
>>
>>
>> --
>> PHP Webmaster List Mailing List (http://www.php.net/)
>> To unsubscribe, visit: http://www.php.net/unsub.php
>>
>
> my guess is that we don't serve the intermediate certificate which can cause
> problems for some browsers and a quick test with openssl verifies my guess:
>
> openssl s_client -connect wiki.php.net:443
> CONNECTED(00000003)
> depth=0 /OU=Domain Control Validated/OU=PositiveSSL Wildcard/CN=*..php.net
> verify error:num=20:unable to get local issuer certificate
> verify return:1
> depth=0 /OU=Domain Control Validated/OU=PositiveSSL Wildcard/CN=*..php.net
> verify error:num=27:certificate not trusted
> verify return:1
> depth=0 /OU=Domain Control Validated/OU=PositiveSSL Wildcard/CN=*..php.net
> verify error:num=21:unable to verify the first certificate
> verify return:1
> ---
> Certificate chain
> 0 s:/OU=Domain Control Validated/OU=PositiveSSL Wildcard/CN=*.php.net
> i:/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA
> Limited/CN=PositiveSSL CA 2
> ...
> Verify return code: 21 (unable to verify the first certificate)
>
> cc'ing systems@ so somebody with access to that box can fix the issue.
>
>
> --
> Ferenc Kovács
> @Tyr43l - http://tyrael.hu