[Bug 552717] New: openSUSE.org authentication occasionally reports a certificate problem - openSUSE Bugs - openSUSE Mailing Lists

newer
[Bug 472518] SELF-ASSIGNED TESTBUG...

[Bug 552717] New: openSUSE.org authentication occasionally reports a certificate problem

older
[Bug 576962] New: Views in...

bugzilla_noreply＠novell.com

5 Nov 2009 5 Nov '09

05:05

http://bugzilla.novell.com/show_bug.cgi?id=552717 Summary: openSUSE.org authentication occasionally reports a certificate problem Classification: openSUSE Product: openSUSE.org Version: unspecified Platform: Other OS/Version: Other Status: NEW Severity: Normal Priority: P5 - None Component: Software Portal AssignedTo: benji@opensuse.org ReportedBy: dbezzant@novell.com QAContact: opensuse-communityscreening@forge.provo.novell.com CC: jhenderson@novell.com Found By: --- Not sure which component to select for this, this came in through the Novell Help Desk from Jim Henderson, Ticket #HD1344846: "We've got customers who have reported intermittent problems with the authentication process through forums.opensuse.org - at random intervals, they get a "certificate is not authentic" warning from their browser. It's intermittent enough that it seems that one of the servers in the cluster perhaps has an incorrect certificate on it. Can we have someone look into this? It's affecting customers (I have not had time to try to reproduce the issue, but one customer has seen it a half dozen times since Friday)" -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

Show replies by date

bugzilla_noreply＠novell.com

5 Nov 5 Nov

13:16

New subject: [Bug 552717] openSUSE.org authentication occasionally reports a certificate problem

http://bugzilla.novell.com/show_bug.cgi?id=552717 Thomas Schmidt changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |kgroneman@novell.com, | |mmagleby@novell.com, | |tschmidt@novell.com AssignedTo|benji@opensuse.org |mmagleby@novell.com -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

16:56

New subject: [Bug 552717] openSUSE.org authentication occasionally reports a certificate problem

http://bugzilla.novell.com/show_bug.cgi?id=552717 User mmagleby@novell.com added comment http://bugzilla.novell.com/show_bug.cgi?id=552717#c1 Matt Magleby changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO CC| |poeml@novell.com Info Provider| |poeml@novell.com --- Comment #1 from Matt Magleby 2009-11-05 09:56:41 MST --- Someone posted a screenshot of the error in a thread on this issue in the forums, which indicates the error is referencing "static.opensuse.org" "The server failed the authenticity check (static.opensuse.org). the certificate authority's certificate is invalid. The root certificate authority's certificate is not trusted for this purpose" Setting NEEDINFO to Peter Poeml to have him check the cert on the static.opensuse.org server(s). The thread also mentioned the problem started occuring about the time the OpenSUSE login/logout pages were updated last week. I have re-published the login/logout pages to all the iChain servers in case things did not get completely deployed previously. Thread here: http://forums.opensuse.org/forum-usage-support-information/424324-login-scre... Screenshot here: http://forums.opensuse.org/attachments/screenshots/617d1256976396-logout-cer... -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

10 Nov 10 Nov

13:41

New subject: [Bug 552717] openSUSE.org authentication occasionally reports a certificate problem

http://bugzilla.novell.com/show_bug.cgi?id=552717 User mrueckert@novell.com added comment http://bugzilla.novell.com/show_bug.cgi?id=552717#c2 --- Comment #2 from Marcus Rückert 2009-11-10 06:41:44 MST --- the cert is valid until december 2011 and from a CA that should normally be in the CA list of all browsers. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

18:23

New subject: [Bug 552717] openSUSE.org authentication occasionally reports a certificate problem

http://bugzilla.novell.com/show_bug.cgi?id=552717 User mmagleby@novell.com added comment http://bugzilla.novell.com/show_bug.cgi?id=552717#c3 Matt Magleby changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |RESOLVED Info Provider|poeml@novell.com | Resolution| |FIXED --- Comment #3 from Matt Magleby 2009-11-10 11:23:13 MST --- I believe this is resolved with re-updating the login pages. Jim, can you verify if customers are working properly now? -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

18:29

New subject: [Bug 552717] openSUSE.org authentication occasionally reports a certificate problem

http://bugzilla.novell.com/show_bug.cgi?id=552717 User jhenderson@novell.com added comment http://bugzilla.novell.com/show_bug.cgi?id=552717#c4 --- Comment #4 from Jim Henderson 2009-11-10 11:29:36 MST --- Thanks, Matt - I'll ask the user who reported the problem to try again and let me know if he sees the problem again. Given that it was an intermittent problem, if I don't hear back from him I'll go ahead and mark the fix as verified in about a week. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

14 Nov 14 Nov

02:39

New subject: [Bug 552717] openSUSE.org authentication occasionally reports a certificate problem

http://bugzilla.novell.com/show_bug.cgi?id=552717 User jhenderson@novell.com added comment http://bugzilla.novell.com/show_bug.cgi?id=552717#c5 Jim Henderson changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |REOPENED Resolution|FIXED | --- Comment #5 from Jim Henderson 2009-11-13 19:39:11 MST --- Just received the following message from the user who reported the issue to me: Bad news - this gremlin is out to tease us no end. Immediately after reading the last message, I logged out and got the message on the logout screen for the first time in a long time and this morning it reappeared on the login in screen. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

02:40

New subject: [Bug 552717] openSUSE.org authentication occasionally reports a certificate problem

http://bugzilla.novell.com/show_bug.cgi?id=552717 User jhenderson@novell.com added comment http://bugzilla.novell.com/show_bug.cgi?id=552717#c6 --- Comment #6 from Jim Henderson 2009-11-13 19:40:53 MST --- User also got a screenshot showing the issue: http://tinyurl.com/yk3fh66 -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

24 Nov 24 Nov

20:46

New subject: [Bug 552717] openSUSE.org authentication occasionally reports a certificate problem

http://bugzilla.novell.com/show_bug.cgi?id=552717 http://bugzilla.novell.com/show_bug.cgi?id=552717#c7 --- Comment #7 from Matt Magleby 2009-11-24 20:46:29 UTC --- The screenshot referenced by Jim says the following: The server failed the authenticity check (static.opensuse.org). The certificate authority's certificate is invalid. The root certificate authority's certificate is not trusted for this purpose. Reassigning to Marcus as I am not involved with with static.opensuse.org -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

20:47

New subject: [Bug 552717] openSUSE.org authentication occasionally reports a certificate problem

http://bugzilla.novell.com/show_bug.cgi?id=552717 http://bugzilla.novell.com/show_bug.cgi?id=552717#c Matt Magleby changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|mmagleby@novell.com |mrueckert@novell.com -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

20:49

New subject: [Bug 552717] openSUSE.org authentication occasionally reports a certificate problem

http://bugzilla.novell.com/show_bug.cgi?id=552717 http://bugzilla.novell.com/show_bug.cgi?id=552717#c8 --- Comment #8 from Jim Henderson 2009-11-24 20:49:04 UTC --- Thanks - just so you know, the user who reported this initially has indicated that he saw it again last Thursday - but only one authentication attempt resulted in it showing up that day. It seems to be very hit and miss as to whether or not he runs into the issue. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

25 Nov 25 Nov

21:17

New subject: [Bug 552717] openSUSE.org authentication occasionally reports a certificate problem

http://bugzilla.novell.com/show_bug.cgi?id=552717 http://bugzilla.novell.com/show_bug.cgi?id=552717#c9 --- Comment #9 from Jim Henderson 2009-11-25 21:17:00 UTC --- Asked the user for some information from lsof -i as well to see if that helps narrow the problem down - here's what he came back with after seeing the issue again: Ok This is what lsof -i displays when there are no problems: COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME kio_http 3837 john 39u IPv4 18522 0t0 TCP 82-47-182-199.cable.ubr01.hali.blueyonder.co.uk:56131->ew-in-f102.1e100.net:http (ESTABLISHED) kio_http 3918 john 27u IPv4 18442 0t0 TCP 82-47-182-199.cable.ubr01.hali.blueyonder.co.uk:58036->narwal.opensuse.org:http (CLOSE_WAIT) kio_http 3960 john 8u IPv4 18615 0t0 TCP 82-47-182-199.cable.ubr01.hali.blueyonder.co.uk:45647->secure-www.novell.com:https (ESTABLISHED) kio_http 3961 john 9u IPv4 18184 0t0 TCP 82-47-182-199.cable.ubr01.hali.blueyonder.co.uk:33857->81.22.39.115:http (CLOSE_WAIT) kio_http 3966 john 9u IPv4 17840 0t0 TCP 82-47-182-199.cable.ubr01.hali.blueyonder.co.uk:35890->wy-in-f149.1e100.net:http (ESTABLISHED) kio_http 3967 john 12u IPv4 18208 0t0 TCP 82-47-182-199.cable.ubr01.hali.blueyonder.co.uk:33862->81.22.39.115:http (CLOSE_WAIT) kio_http 4000 john 8u IPv4 18611 0t0 TCP 82-47-182-199.cable.ubr01.hali.blueyonder.co.uk:45643->secure-www.novell.com:https (ESTABLISHED) kio_http 4001 john 8u IPv4 18692 0t0 TCP 82-47-182-199.cable.ubr01.hali.blueyonder.co.uk:47674->66.235.133.1:https (ESTABLISHED) This is what lsof -i displays when the certificate is inauthentic: the repetitions appear to relate to the error messages. COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME kio_http 3973 john 33u IPv4 23502 0t0 TCP 82-47-182-199.cable.ubr01.hali.blueyonder.co.uk:33722->cds29.lon9.msecn.net:http (CLOSE_WAIT) kio_http 3994 john 20u IPv4 23602 0t0 TCP 82-47-182-199.cable.ubr01.hali.blueyonder.co.uk:59367->narwal.opensuse.org:http (CLOSE_WAIT) kio_http 4007 john 17u IPv4 23664 0t0 TCP 82-47-182-199.cable.ubr01.hali.blueyonder.co.uk:59372->narwal.opensuse.org:http (CLOSE_WAIT) kio_http 4014 john 14u IPv4 23670 0t0 TCP 82-47-182-199.cable.ubr01.hali.blueyonder.co.uk:59373->narwal.opensuse.org:http (CLOSE_WAIT) kio_http 4040 john 14u IPv4 23496 0t0 TCP 82-47-182-199.cable.ubr01.hali.blueyonder.co.uk:54225->ww-in-f149.1e100.net:http (ESTABLISHED) kio_http 4044 john 12u IPv4 23655 0t0 TCP 82-47-182-199.cable.ubr01.hali.blueyonder.co.uk:59371->narwal.opensuse.org:http (CLOSE_WAIT) kio_http 4049 john 9u IPv4 23598 0t0 TCP 82-47-182-199.cable.ubr01.hali.blueyonder.co.uk:59366->narwal.opensuse.org:http (CLOSE_WAIT) kio_http 4055 john 10u IPv4 23671 0t0 TCP 82-47-182-199.cable.ubr01.hali.blueyonder.co.uk:59374->narwal.opensuse.org:http (CLOSE_WAIT) kio_http 4133 john 9u IPv4 23902 0t0 TCP 82-47-182-199.cable.ubr01.hali.blueyonder.co.uk:55840->narwal.opensuse.org:https (ESTABLISHED) kio_http 4134 john 10u IPv4 23892 0t0 TCP 82-47-182-199.cable.ubr01.hali.blueyonder.co.uk:55838->narwal.opensuse.org:https (ESTABLISHED) kio_http 4135 john 8u IPv4 23901 0t0 TCP 82-47-182-199.cable.ubr01.hali.blueyonder.co.uk:55839->narwal.opensuse.org:https (ESTABLISHED) I didn't think to run lsof -i after clearing the error messages and before logging in. So this is what lsof -i displays after the error messages have been dismissed and the login completed. COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME kio_http 3968 john 33u IPv4 26376 0t0 TCP 82-47-182-199.cable.ubr01.hali.blueyonder.co.uk:45123->cot.novell.com:http (ESTABLISHED) kio_http 3977 john 19u IPv4 26280 0t0 TCP 82-47-182-199.cable.ubr01.hali.blueyonder.co.uk:45116->cot.novell.com:http (ESTABLISHED) kio_http 3983 john 36u IPv4 26261 0t0 TCP 82-47-182-199.cable.ubr01.hali.blueyonder.co.uk:45115->cot.novell.com:http (ESTABLISHED) kio_http 3994 john 20u IPv4 26158 0t0 TCP 82-47-182-199.cable.ubr01.hali.blueyonder.co.uk:45109->cot.novell.com:http (ESTABLISHED) kio_http 4007 john 17u IPv4 26247 0t0 TCP 82-47-182-199.cable.ubr01.hali.blueyonder.co.uk:45113->cot.novell.com:http (ESTABLISHED) kio_http 4014 john 14u IPv4 26505 0t0 TCP 82-47-182-199.cable.ubr01.hali.blueyonder.co.uk:43528->ez-in-f138.1e100.net:http (ESTABLISHED) kio_http 4042 john 14u IPv4 26163 0t0 TCP 82-47-182-199.cable.ubr01.hali.blueyonder.co.uk:45110->cot.novell.com:http (ESTABLISHED) kio_http 4044 john 12u IPv4 26372 0t0 TCP 82-47-182-199.cable.ubr01.hali.blueyonder.co.uk:45122->cot.novell.com:http (ESTABLISHED) kio_http 4049 john 12u IPv4 26311 0t0 TCP 82-47-182-199.cable.ubr01.hali.blueyonder.co.uk:45119->cot.novell.com:http (ESTABLISHED) kio_http 4055 john 10u IPv4 26385 0t0 TCP 82-47-182-199.cable.ubr01.hali.blueyonder.co.uk:45124->cot.novell.com:http (ESTABLISHED) kio_http 4140 john 8u IPv4 26423 0t0 TCP 82-47-182-199.cable.ubr01.hali.blueyonder.co.uk:43526->ez-in-f138.1e100.net:http (ESTABLISHED) -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

23:00

New subject: [Bug 552717] openSUSE.org authentication occasionally reports a certificate problem

http://bugzilla.novell.com/show_bug.cgi?id=552717 http://bugzilla.novell.com/show_bug.cgi?id=552717#c10 Marcus Rückert changed: What |Removed |Added ---------------------------------------------------------------------------- Status|REOPENED |ASSIGNED --- Comment #10 from Marcus Rückert 2009-11-25 23:00:31 UTC --- kio_http 3918 john 27u IPv4 18442 0t0 TCP 82-47-182-199.cable.ubr01.hali.blueyonder.co.uk:58036->narwal.opensuse.org:http thats the problem. one CSS references a HTTP resource while it should request a https resource. i will investigate that tomorrow. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

27 Nov 27 Nov

19:21

New subject: [Bug 552717] openSUSE.org authentication occasionally reports a certificate problem

http://bugzilla.novell.com/show_bug.cgi?id=552717 http://bugzilla.novell.com/show_bug.cgi?id=552717#c11 --- Comment #11 from Marcus Rückert 2009-11-27 19:21:00 UTC --- q: does this only happen with konqueror/arora (kde 4 basically)? -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

30 Nov 30 Nov

17:20

New subject: [Bug 552717] openSUSE.org authentication occasionally reports a certificate problem

http://bugzilla.novell.com/show_bug.cgi?id=552717 http://bugzilla.novell.com/show_bug.cgi?id=552717#c12 --- Comment #12 from Jim Henderson 2009-11-30 17:20:20 UTC --- I've asked the reporter to confirm the browser or browsers he's using and will report back as soon as I have an answer to that question. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

1 Dec 1 Dec

16:52

New subject: [Bug 552717] openSUSE.org authentication occasionally reports a certificate problem

http://bugzilla.novell.com/show_bug.cgi?id=552717 http://bugzilla.novell.com/show_bug.cgi?id=552717#c13 --- Comment #13 from Jim Henderson 2009-12-01 16:51:59 UTC --- User reports that he only sees it with Konqueror - he has seen it on the Build Service site as well, but no other Novell/openSUSE sites. He's run into one other site on the 'net that deos this, something with the website for the City of London. Might be a combination of something in Konqueror and the server config that causes it - that would explain why just the one user is reporting the issue. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

17:10

New subject: [Bug 552717] openSUSE.org authentication occasionally reports a certificate problem

http://bugzilla.novell.com/show_bug.cgi?id=552717 http://bugzilla.novell.com/show_bug.cgi?id=552717#c14 --- Comment #14 from Thomas Schmidt 2009-12-01 18:10:20 CET --- Konqueror loads also images referenced from the stylesheets that are actually not used on the site, whereas firefox doesn't. Maybe this is the cause, so there might be a HTTP reference in a stylesheet. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

18 May 18 May

12:20

New subject: [Bug 552717] openSUSE.org authentication occasionally reports a certificate problem

http://bugzilla.novell.com/show_bug.cgi?id=552717 http://bugzilla.novell.com/show_bug.cgi?id=552717#c15 Marcus Rückert changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |NEEDINFO InfoProvider| |dbezzant@novell.com --- Comment #15 from Marcus Rückert 2010-05-18 12:20:20 UTC --- do you still see the issue? -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

13:47

New subject: [Bug 552717] openSUSE.org authentication occasionally reports a certificate problem

http://bugzilla.novell.com/show_bug.cgi?id=552717 http://bugzilla.novell.com/show_bug.cgi?id=552717#c16 David Bezzant changed: What |Removed |Added ---------------------------------------------------------------------------- InfoProvider|dbezzant@novell.com |jhenderson@novell.com --- Comment #16 from David Bezzant 2010-05-18 13:47:55 UTC --- Jim, is this still an issue? Can we close this? -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

14:26

New subject: [Bug 552717] openSUSE.org authentication occasionally reports a certificate problem

http://bugzilla.novell.com/show_bug.cgi?id=552717 http://bugzilla.novell.com/show_bug.cgi?id=552717#c17 Jim Henderson changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |ASSIGNED InfoProvider|jhenderson@novell.com | --- Comment #17 from Jim Henderson 2010-05-18 14:26:19 UTC --- I haven't heard anything new from the person who reported it - I think we're probably OK now. I'll go ahead and close it. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

14:27

New subject: [Bug 552717] openSUSE.org authentication occasionally reports a certificate problem

http://bugzilla.novell.com/show_bug.cgi?id=552717 http://bugzilla.novell.com/show_bug.cgi?id=552717#c18 Jim Henderson changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |CLOSED Resolution| |WORKSFORME --- Comment #18 from Jim Henderson 2010-05-18 14:27:33 UTC --- Closing as "works for me". -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

5099

Age (days ago)

5293

Last active (days ago)

Download

20 comments

1 participants

tags

participants (1)

bugzilla_noreply＠novell.com