FF is not accepting your certificate

Juan Pablo's Avatar

Juan Pablo

12 May, 2010 09:05 AM via web

Got an "sec_error_revoked_certificate" and had to change the FF config to bypass it.

  1. 2 Posted by Alex on 12 May, 2010 09:08 AM

    Alex's Avatar

    Same in Chrome :(

    The server's security certificate is revoked!
    You attempted to reach www.nirvanahq.com, but the certificate that the server presented has been revoked by its issuer. This means that the security credentials that the server presented absolutely should not be trusted. You may be communicating with an attacker. You should not proceed.

  2. 3 Posted by pnooren on 12 May, 2010 09:36 AM

    pnooren's Avatar

    I have the same in FF, but in Chrome the site is still accessible. Who needs FF anyway ;)

  3. 4 Posted by Elurven on 12 May, 2010 09:37 AM

    Elurven's Avatar

    It does not work in Firefox where I get the same error message as @Juan Pablo.

    "An error occurred during a connection to www.nirvanahq.com.

    Peer's Certificate has been revoked.

    (Error code: sec_error_revoked_certificate)

    • The page you are trying to view can not be shown because the authenticity of the received data could not be verified.

    • Please contact the web site owners to inform them of this problem. Alternatively, use the command found in the help menu to report this broken site."

    Chrome does not work either...

  4. 5 Posted by PavelCZ on 12 May, 2010 09:47 AM

    PavelCZ's Avatar

    I have problem with certificate in Chrome and in Firefox too. Please fix it.

  5. 6 Posted by Maarten on 12 May, 2010 10:19 AM

    Maarten's Avatar

    Same here... IE is not working either, iPhone version works fine.

  6. 7 Posted by Guðjón on 12 May, 2010 10:39 AM

    Guðjón's Avatar

    I have the same problem and in all browser types.

  7. 8 Posted by vad710 on 12 May, 2010 11:15 AM

    vad710's Avatar

    Does not seem to be working in my version of Chrome either. :(

  8. 9 Posted by Timo on 12 May, 2010 11:59 AM

    Timo's Avatar

    I have the same problem in Chrome, IE8 and FireFox.

    I currently bypassed the problem in FireFox by doing the following (at your own risk):
    1. In FireFox, go to "about:config"
    2. Filter for "security"
    3. Edit "security.OCSP.enabled" and turn it to 0 instead of the default 1.

    Beware, this will count for the entire internet, not just the NirvanaHQ website.

  9. 10 Posted by Alex on 12 May, 2010 12:05 PM

    Alex's Avatar

    Fix for chrome is.....

    1. Click Spanner
    2. Options
    3. Under the bonnet Tab.
    4. Untick "Check for server certificate revocation"
  10. Support Staff 11 Posted by Elbert McLaughlin on 12 May, 2010 12:30 PM

    Elbert McLaughlin's Avatar

    Oh dear... the joys of being a beta tester. Ugh. Sorry about this guys. We've been moving things around server-side, and it looks like our new SSL certificates are causing issues. Drat. (I knew we should have gone with wildcard rather than ucc) Didn't realize it was actually causing a roadblock in FF.

    Anyone here have experience with Godaddy and UCC ssl certs? We'll be working on a solution this morning. Please bear with us...

  11. 12 Posted by A-CAST on 12 May, 2010 12:33 PM

    A-CAST's Avatar

    I'm running into the same problem this morning on both FF and IE8. I'll do the fix that Timo suggested for FF and just put it back to it's default setting once Nirvana fixes this problem.

    @Elbert: I have a GoDaddy domain but never had to mess with the SSL for it. As for SSL experience...I do have that since I implement all of my SSL's for the company I work for but I'm not sure about UCC SSL certs? never heard of those.

    I love wildcard certs much easier to mess with but I've also implemented non-wildcard ones as well.

    Let me know if I could be of any help...I'll be glad to contribute...thanks!

  12. Support Staff 13 Posted by Elbert McLaughlin on 12 May, 2010 12:56 PM

    Elbert McLaughlin's Avatar

    Thanks A-CAST. Heading in to the office now and will be attacking this as soon as I boot up there. Here's our setup: we're running lighttpd on centos, and we have a UCC cert from godaddy (to support up to 5 subdomains, eg www.nirvanahq.com, login.nirvanahq.com etc etc). 2 minute googling didn't bear fruit for me, so will have to dig deeper when i get in.

  13. 14 Posted by phusick on 12 May, 2010 01:22 PM

    phusick's Avatar

    I cannot access login page too. Chrome, Chromium, FF, Opera, IE8 do not let me go there because of a problem with the security certificate.

    Workaround: Safari for Windows has an option [Continue] to ignore the security issue.

  14. 15 Posted by O on 12 May, 2010 01:53 PM

    O's Avatar

    Really annoyed, I've got work to do and I can't see my task list. If you can't fix it, at least post a workaround for all the main browsers. I use Chrome, and although someone mentioned a fix that doesn't seem to apply to v4, option doesn't exist.

  15. 16 Posted by Brian on 12 May, 2010 01:58 PM

    Brian's Avatar

    In chrome:

    Click the wrench
    Click options
    Under the hood
    scroll all the way down and uncheck "Check for server certificate revocation"

    Keep in mind this is for the entire internet so once Nirvana gets all of this fixed you need to check it again!

  16. 17 Posted by Elurven on 12 May, 2010 02:13 PM

    Elurven's Avatar

    Seems to work on Safari on the iPhone though. Nice to have that as a backup.

    @O: I belive that work arounds are available in this thread for Firefox and Chrome.

  17. Support Staff 18 Posted by Elbert McLaughlin on 12 May, 2010 02:25 PM

    Elbert McLaughlin's Avatar

    STATUS UPDATE
    We've purchased and migrated all of our servers to a wildcard ssl certificate. https://www.nirvanahq.com/app should be working now. Please let us know if you are still experiencing problems.

  18. 19 Posted by DC Clarke on 12 May, 2010 02:49 PM

    DC Clarke's Avatar

    Yes, working in Chrome again. Thanks!

  19. 20 Posted by Timo on 14 May, 2010 09:11 AM

    Timo's Avatar

    Tested in Chrome, FireFox and IE8. It works on all tested browsers. Thanks for updating.

  20. Support Staff 21 Posted by Elbert McLaughlin on 14 May, 2010 02:03 PM

    Elbert McLaughlin's Avatar

    Thanks Timo.
    I dare say this issue is now resolved. Cheers all.

  21. Elbert McLaughlin closed this discussion on 14 May, 2010 02:03 PM.

Comments are currently closed for this discussion. You can start a new one.

Recent Discussions

07 Mar, 2012 04:47 PM
08 Dec, 2011 10:32 PM
01 Apr, 2012 11:26 PM
07 May, 2012 05:17 PM
07 Oct, 2011 02:00 AM