GlobalSign Intermediate SSL Certificates missing.
Forum rules
Please keep everything here strictly on-topic.
This board is meant for Pale Moon source code development related subjects only like code snippets, patches, specific bugs, git, the repositories, etc.
This is not for tech support! Please do not post tech support questions in the "Development" board!
Please make sure not to use this board for support questions. Please post issues with specific websites, extensions, etc. in the relevant boards for those topics.
Please keep things on-topic as this forum will be used for reference for Pale Moon development. Expect topics that aren't relevant as such to be moved or deleted.
Please keep everything here strictly on-topic.
This board is meant for Pale Moon source code development related subjects only like code snippets, patches, specific bugs, git, the repositories, etc.
This is not for tech support! Please do not post tech support questions in the "Development" board!
Please make sure not to use this board for support questions. Please post issues with specific websites, extensions, etc. in the relevant boards for those topics.
Please keep things on-topic as this forum will be used for reference for Pale Moon development. Expect topics that aren't relevant as such to be moved or deleted.
GlobalSign Intermediate SSL Certificates missing.
Some GlobalSign intermediate plugins missing on default install.
For instance, the site below is not working without "Organization Validation CA - SHA256 - G2"
https://hmb.gov.tr
Certificates are here:
https://support.globalsign.com/customer ... rtificates
PaleMoon Version: 28.3.0, x86_64
For instance, the site below is not working without "Organization Validation CA - SHA256 - G2"
https://hmb.gov.tr
Certificates are here:
https://support.globalsign.com/customer ... rtificates
PaleMoon Version: 28.3.0, x86_64
-
- Knows the dark side
- Posts: 5174
- Joined: 2011-10-03, 10:19
- Location: Piney Woods of Southeast Texas, USA
Re: GlobalSign Intermediate SSL Certificates missing.
I clicked on your link and the site is working for me. At least I think it is working since I don't speak or write whatever language is being used. I clicked on all the sublinks too. Everything displayed properly.
So please explain what is "not working".
And I'm using 64 bit linux Pale Moon 28.3.1 running in 64 bit linux Mint 19.1 (Tessa) Xfce.
So please explain what is "not working".
And I'm using 64 bit linux Pale Moon 28.3.1 running in 64 bit linux Mint 19.1 (Tessa) Xfce.
Linux Mint 21.3 (Virginia) Xfce w/ Linux Pale Moon, Linux Waterfox, Linux SeaLion, Linux Firefox
MX Linux 23.2 (Libretto) Xfce w/ Linux Pale Moon, Linux Waterfox, Linux SeaLion, Linux Firefox
Linux Debian 12.5 (Bookworm) Xfce w/ Linux Pale Moon, Linux Waterfox, Linux SeaLion, Linux Firefox
MX Linux 23.2 (Libretto) Xfce w/ Linux Pale Moon, Linux Waterfox, Linux SeaLion, Linux Firefox
Linux Debian 12.5 (Bookworm) Xfce w/ Linux Pale Moon, Linux Waterfox, Linux SeaLion, Linux Firefox
-
- Pale Moon guru
- Posts: 35648
- Joined: 2011-08-28, 17:27
- Location: Motala, SE
Re: GlobalSign Intermediate SSL Certificates missing.
Intermediate certificates have to be presented by the server when connecting to them, not built into clients -- and this site does this properly.
There is no reason this site will not work unless you, yourself, have distrusted the issuer in the browser (either in the certificate manager or by way of an extension).
There is no reason this site will not work unless you, yourself, have distrusted the issuer in the browser (either in the certificate manager or by way of an extension).
"Sometimes, the best way to get what you want is to be a good person." -- Louis Rossmann
"Seek wisdom, not knowledge. Knowledge is of the past; wisdom is of the future." -- Native American proverb
"Linux makes everything difficult." -- Lyceus Anubite
"Seek wisdom, not knowledge. Knowledge is of the past; wisdom is of the future." -- Native American proverb
"Linux makes everything difficult." -- Lyceus Anubite
Re: GlobalSign Intermediate SSL Certificates missing.
This is the result when I try with PM 28.3.0 on Devuan Linux x64. Installed from Steven Pusser repo.
I don't know what I'm doing wrong. If I add the intermediate cert manually, problem solves.
I don't know what I'm doing wrong. If I add the intermediate cert manually, problem solves.
You do not have the required permissions to view the files attached to this post.
-
- Board Warrior
- Posts: 1277
- Joined: 2017-06-06, 07:38
Re: GlobalSign Intermediate SSL Certificates missing.
I'm also able to connect as well. On Mac, self built Pale Moon from latest master.
-
- Board Warrior
- Posts: 1651
- Joined: 2018-06-08, 17:02
Re: GlobalSign Intermediate SSL Certificates missing.
Are you using an antivirus?
As a test, create a new, clean Profile.
Then try to load https://hmb.gov.tr/.
Did that work?
As a test, create a new, clean Profile.
Then try to load https://hmb.gov.tr/.
Did that work?
Re: GlobalSign Intermediate SSL Certificates missing.
Always testing with clean profile. I'm not using antivirus because I'm using Linux.therube wrote:Are you using an antivirus?
As a test, create a new, clean Profile.
These are the Globalsign root certs on default install:
You do not have the required permissions to view the files attached to this post.
-
- Pale Moon guru
- Posts: 35648
- Joined: 2011-08-28, 17:27
- Location: Motala, SE
Re: GlobalSign Intermediate SSL Certificates missing.
In the "add exception" window, you will have the opportunity to view the presented certificates. Can you provide the details of the presented certificates, please?
(CN, issuer, etc.)
(CN, issuer, etc.)
"Sometimes, the best way to get what you want is to be a good person." -- Louis Rossmann
"Seek wisdom, not knowledge. Knowledge is of the past; wisdom is of the future." -- Native American proverb
"Linux makes everything difficult." -- Lyceus Anubite
"Seek wisdom, not knowledge. Knowledge is of the past; wisdom is of the future." -- Native American proverb
"Linux makes everything difficult." -- Lyceus Anubite
Re: GlobalSign Intermediate SSL Certificates missing.
It seems the problem is related with something else. Probably a dns or network topology issue since Firefox has same issue as well. And if I only use the network/dns at work. Interestingly, Chromium is immune of such issue on same network.Moonchild wrote:In the "add exception" window, you will have the opportunity to view the presented certificates. Can you provide the details of the presented certificates, please?
(CN, issuer, etc.)
If I use regular internet from my ISP, problem doesn't exist. So,I acknowledge that this is not a missing certificate issue.
If you still interest on given certification information from site, it is here:
You do not have the required permissions to view the files attached to this post.
-
- Pale Moon guru
- Posts: 35648
- Joined: 2011-08-28, 17:27
- Location: Motala, SE
Re: GlobalSign Intermediate SSL Certificates missing.
Thanks for the cert info -- that indeed does look OK so shouldn't be the problem. I'm assuming this is the cert from your normal ISP that doesn't have the problem?
It's likely in that case that your work has a decrypting proxy in use (endpoint security or AV or similar) that presents a different cert so it can intercept https traffic.
It's likely in that case that your work has a decrypting proxy in use (endpoint security or AV or similar) that presents a different cert so it can intercept https traffic.
"Sometimes, the best way to get what you want is to be a good person." -- Louis Rossmann
"Seek wisdom, not knowledge. Knowledge is of the past; wisdom is of the future." -- Native American proverb
"Linux makes everything difficult." -- Lyceus Anubite
"Seek wisdom, not knowledge. Knowledge is of the past; wisdom is of the future." -- Native American proverb
"Linux makes everything difficult." -- Lyceus Anubite
Re: GlobalSign Intermediate SSL Certificates missing.
Actually not. That screenshot is from a problematic session. If it is a proxy or security av that forcing its own certificate, Chromium should have same issue as well but not. Only Firefox and Pale Moon have this issue, though not tried any other Mozilla based browser.Moonchild wrote:Thanks for the cert info -- that indeed does look OK so shouldn't be the problem. I'm assuming this is the cert from your normal ISP that doesn't have the problem?
It's likely in that case that your work has a decrypting proxy in use (endpoint security or AV or similar) that presents a different cert so it can intercept https traffic.
-
- Pale Moon guru
- Posts: 35648
- Joined: 2011-08-28, 17:27
- Location: Motala, SE
Re: GlobalSign Intermediate SSL Certificates missing.
Not necessarily. I don't know if Chromium automatically imports certs from the Windows trust store or not, but if so, then it's possible the security software installed the required intermediates in the Windows store. Since we use our own trust store, (and Firefox likewise, probably), it wouldn't be picked up automatically.terranigma wrote:If it is a proxy or security av that forcing its own certificate, Chromium should have same issue as well but not.
"Sometimes, the best way to get what you want is to be a good person." -- Louis Rossmann
"Seek wisdom, not knowledge. Knowledge is of the past; wisdom is of the future." -- Native American proverb
"Linux makes everything difficult." -- Lyceus Anubite
"Seek wisdom, not knowledge. Knowledge is of the past; wisdom is of the future." -- Native American proverb
"Linux makes everything difficult." -- Lyceus Anubite
Re: GlobalSign Intermediate SSL Certificates missing.
Does this explain why problem solves if I add the GlobalSign intermediate certs manually which are already presented by the server?Moonchild wrote:Not necessarily. I don't know if Chromium automatically imports certs from the Windows trust store or not, but if so, then it's possible the security software installed the required intermediates in the Windows store. Since we use our own trust store, (and Firefox likewise, probably), it wouldn't be picked up automatically.terranigma wrote:If it is a proxy or security av that forcing its own certificate, Chromium should have same issue as well but not.