Moonchild wrote:This is because of an outdated CA or root cert list (either on your system or in the browser)
I tried setting rowser.xul.error_pages.expert_bad_cert to true as you suggested; however, the problem persisted.Moonchild wrote:Double-click browser.xul.error_pages.expert_bad_cert. The value will change to true.
I tried this. There was no change in ability to display the desired page.Moonchild wrote:First though, I suggest you try to fix your current profile by selecting "restart with add-ons disabled" from the Help menu, and in the startup dialog select "Reset toolbars and controls" and "reset preferences to default", then "Make changes and continue"
I deleted the entire "%USerProfile%\Application Data\Moonchild Productions" directory tree and relaunched Pale Moon by running "PALEMOON https://www.orbitel.com/index.php?optio ... k=miCuenta". The problem persisted.Moonchild wrote:you may have to create a new profile to fix it.
Did the DigNotar problem affect Pale Moon differently than Firefox?Moonchild wrote:Please try upgrading your browser to the latest version. It is possible the DigiNotar problem that plagued 6.0 and the haphazard fix for it are the root cause for your problems. This has been handled more properly in 7 and the soon to be released version 8.
I just installed and tested the Orbitel website page using Pale Moon 7.0.2 (unreleased).Moonchild wrote:I've verified the problem. this is related to a built-in CA certificate, as a result of a second diginotar-alike hack that has occurred recently. Mozilla has timed their release to synch up with re-issues, unfortunately Pale Moon takes a bit more time to be released.
This will be fixed in v8 to be released this coming Monday, and if you can't wait you can grab 7.0.2 (unreleased) from the Archived versions page which also has this fixed as it's based on a slightly later version of the source code.
(I didn't catch the reproducibility before since I used 7.0.2, myself, in my test setup)
Thanks Moonchild.Moonchild wrote:please grab the certificate from the exported pem file I made from my version of Pale Moon that works.
you can import this in yours, and it should give you a warning with the option to add an exception as a fix until version 8 is released.
Import through tools -> options -> advanced -> tab encryption -> button View Certificates -> tab servers -> button "Import..."
Moonchild wrote:The secure login page over SSL gave the error for me as well in my test setups for v6 and v701, not v702 or v8 when I tried them.
so there's something odd going on, for sure.
I've re-exported the pem (same url) to include the entire chain, that should definitely work.
What I find odd is that Mozilla Firefox 6.0.2 has no difficulty displaying the Orbitel login page.Moonchild wrote:I would at least be very careful. A man-in-the-middle attack may cause the same issues we see here, in which case Pale Moon is doing its job warning about an invalid certificate.
ascii_elite wrote:Could this be an ISP issue (AT&T) specifically targeting Pale Moon traffic?
Users browsing this forum: ikar-us and 16 guests