londonstockexchange.com untrusted charts Topic is solved

Support and discussions for the x86/x64 Linux version of Pale Moon.

Moderator: trava90

Post Reply
User avatar
Lunokhod
Fanatic
Fanatic
Posts: 188
Joined: 2017-04-20, 21:25
Contact:

londonstockexchange.com untrusted charts

Post by Lunokhod » 2020-02-19, 22:39

www.londonstockexchange.com
This Connection is Untrusted
You have asked Pale Moon to connect securely to charts.londonstockexchange.com, but we can't confirm that your connection is secure.

The charts don't display in Pale Moon or in Mozilla Firefox, but it works in Chromium. I sent a message to the website yesterday but it still does it, so perhaps it's worth mentioning here too.

User avatar
Moonraker
Board Warrior
Board Warrior
Posts: 1325
Joined: 2015-09-30, 23:02
Location: uk.

Re: londonstockexchange.com untrusted charts

Post by Moonraker » 2020-02-19, 23:41

No problems for me.
Xenial puppy linux 32-bit.

Pale moon 28.9.3

User avatar
Moonchild
Pale Moon guru
Pale Moon guru
Posts: 26673
Joined: 2011-08-28, 17:27
Location: 58°2'16"N 14°58'31"E
Contact:

Re: londonstockexchange.com untrusted charts

Post by Moonchild » 2020-02-19, 23:44

No problem here.
Did you block any specific root or intermediary certificates?
Attachments
FireShot Pro Screen Capture #218 - 'FTSE 100 interactive chart - London Stock Exchange' - www_londonstockexchange_com_exchange_prices-and-markets_stocks_indices_summary_summary-indices-chart_html_index=UKX.png
"There will be times when the position you advocate, no matter how well framed and supported, will not be accepted by the public simply because you are who you are." -- Merrill Rose
Image

User avatar
Moonchild
Pale Moon guru
Pale Moon guru
Posts: 26673
Joined: 2011-08-28, 17:27
Location: 58°2'16"N 14°58'31"E
Contact:

Re: londonstockexchange.com untrusted charts

Post by Moonchild » 2020-02-19, 23:49

Ah.
Their webmaster needs to make sure their cert chain offered to browsers is complete.
They are missing the GeoTrust TLS RSA CA G1 certificate to make the chain complete.

It'll work on browsers that have previously visited other sites that offered that intermediate/CA cert, but not on fresh connections that don't have the cert in their store yet.

https://www.ssllabs.com/ssltest/analyze ... change.com
"There will be times when the position you advocate, no matter how well framed and supported, will not be accepted by the public simply because you are who you are." -- Merrill Rose
Image

User avatar
Lunokhod
Fanatic
Fanatic
Posts: 188
Joined: 2017-04-20, 21:25
Contact:

Re: londonstockexchange.com untrusted charts

Post by Lunokhod » 2020-02-20, 02:53

Could this also be something to do with the ca-certificates-mozilla package not having this certificate when it was expected to?
In /usr/share/ca-certificates/trust-source/mozilla.trust.p11-kit I can see for example:
Actalis S.p.A./03358520967
And if I go to:
Pale Moon - Preferences - Certificates - View Certificates
I see that certificate listed there as well.
If one is missing then it would also affect Firefox. I have quite a fresh profile on Pale Moon and have only used Firefox a few times for comparison. I have no idea myself exactly where this missing certificate is supposed to reside though. :)

I sent them another message anyway.

User avatar
Moonchild
Pale Moon guru
Pale Moon guru
Posts: 26673
Joined: 2011-08-28, 17:27
Location: 58°2'16"N 14°58'31"E
Contact:

Re: londonstockexchange.com untrusted charts

Post by Moonchild » 2020-02-20, 09:08

Lunokhod wrote:
2020-02-20, 02:53
Could this also be something to do with the ca-certificates-mozilla package not having this certificate when it was expected to?
I'm not sure what this has to do with anything. Intermediate certs are not installed separately or by browser vendors in packages.
Intermediate certificates are normally provided by website owners as part of their cert chain offered from SSL, and browsers will store these intermediate certs in their cert store when first encountered.
"There will be times when the position you advocate, no matter how well framed and supported, will not be accepted by the public simply because you are who you are." -- Merrill Rose
Image

User avatar
Lunokhod
Fanatic
Fanatic
Posts: 188
Joined: 2017-04-20, 21:25
Contact:

Re: londonstockexchange.com untrusted charts

Post by Lunokhod » 2020-02-20, 14:19

OK, thanks for the explanation.
I went here:
https://www.tbs-certificates.co.uk/FAQ/ ... CA_G1.html
and imported the certificate via the link, checked trust for every box in the dialogue that appeared, now the charts are shown as they should be. So that was definitely the problem there.

User avatar
Moonchild
Pale Moon guru
Pale Moon guru
Posts: 26673
Joined: 2011-08-28, 17:27
Location: 58°2'16"N 14°58'31"E
Contact:

Re: londonstockexchange.com untrusted charts

Post by Moonchild » 2020-02-20, 14:28

Of course as an end user you shouldn't have to do this, so the webmasters definitely need to be made aware of it and fix it.
"There will be times when the position you advocate, no matter how well framed and supported, will not be accepted by the public simply because you are who you are." -- Merrill Rose
Image

Post Reply