Cannot Browse webpage on Orbitel Website

Users and developers helping users with generic and technical Pale Moon issues on all operating systems.

Moderator: trava90

Forum rules
This board is for technical/general usage questions and troubleshooting for the Pale Moon browser only.
Technical issues and questions not related to the Pale Moon browser should be posted in other boards!
Please keep off-topic and general discussion out of this board, thank you!
User avatar
Moonchild
Pale Moon guru
Pale Moon guru
Posts: 35636
Joined: 2011-08-28, 17:27
Location: Motala, SE
Contact:

Re: Cannot Browse webpage on Orbitel Website

Unread post by Moonchild » 2011-11-16, 23:06

Some more research on my own has provided a solution.

As explained on this page there is a specific issue with certain older certificates (less common intermediate CA cert).

Normally, a web server would present a cert -with- the authenticity chain of certificates up to the root. Orbitel obviously does not (their error). In that case it depends on whether you have previously visited a different secure site with the same CA or not, hence the irregularity. If you would have visited such a site, Pale Moon (or any other browser) would have grabbed the CA cert and stored it for future reference.

As a workaround/fix, you will need the Intermediate CA for Secure Site Pro or Premium SSL used with certificates enrolled before October 10, 2010 from Verisign for the server certificates to work.

For your convenience, I have exported this particular certificate here which you need to import in your browser under Options -> Advanced -> tab Encryption -> [View Certificates] -> tab Servers -> [Import]

I have verified that starting with a blank profile in Pale Moon 8.0, you cannot browse to the site. Importing the CA certificate linked to above fixes the problem.

Have a nice day ;-)
"Sometimes, the best way to get what you want is to be a good person." -- Louis Rossmann
"Seek wisdom, not knowledge. Knowledge is of the past; wisdom is of the future." -- Native American proverb
"Linux makes everything difficult." -- Lyceus Anubite

ascii_elite

Re: Cannot Browse webpage on Orbitel Website

Unread post by ascii_elite » 2011-11-16, 23:26

Moonchild wrote:
  1. The problem seems to be that you are convinced that pale moon is at fault - if that is the case, then Orbitel can't provide a workaround.
It is not that I was convinced, rather I thought it more likely given the information I had. I did not have access to your code base nor what exactly was different from the original Mozilla code, but that there were differences.
Moonchild wrote:EDIT: Shot Orbitel a message with the kind request to look into this and to let me know as much info as possible on this problem from their end.
HOpefulyy, Orbitel shall fix their site.

ascii_elite

Re: Cannot Browse webpage on Orbitel Website

Unread post by ascii_elite » 2011-11-16, 23:28

Moonchild wrote:Some more research on my own has provided a solution.

As explained on this page there is a specific issue with certain older certificates (less common intermediate CA cert).

Normally, a web server would present a cert -with- the authenticity chain of certificates up to the root. Orbitel obviously does not (their error). In that case it depends on whether you have previously visited a different secure site with the same CA or not, hence the irregularity. If you would have visited such a site, Pale Moon (or any other browser) would have grabbed the CA cert and stored it for future reference.

As a workaround/fix, you will need the Intermediate CA for Secure Site Pro or Premium SSL used with certificates enrolled before October 10, 2010 from Verisign for the server certificates to work.

For your convenience, I have exported this particular certificate here which you need to import in your browser under Options -> Advanced -> tab Encryption -> [View Certificates] -> tab Servers -> [Import]

I have verified that starting with a blank profile in Pale Moon 8.0, you cannot browse to the site. Importing the CA certificate linked to above fixes the problem.
Very nice work. Thanks.

Locked