Rubygems.org SSL problem

ruby-talk
1

I just visited rubygems.org and Chromium is reporting that its SSL
certificate is not trusted. Does this issue occur for anyone else?
Thanks.

2

I use google chrome Version 19.0.1083.0 canary on Mac OS X Lion..

Everything is working normally.

Regards,
JF

···

On Mar 27, 2012, at 11:24 PM, Suraj Kurapati wrote:

I just visited rubygems.org and Chromium is reporting that its SSL
certificate is not trusted. Does this issue occur for anyone else?
Thanks.

3

rubygems.org switched to a new certificate provider which is provided by COMODO CA. While their CA was untrusted due to a recent exploit, our certificate was issued after trust should have been restored for your browser (chromium).

It seems this is a bug in the chromium browser as we've had other reports of the same issue, but only with chromium and not with any other browser. I suggest you file a bug with chromium.

···

On Mar 27, 2012, at 10:24 PM, Suraj Kurapati wrote:

I just visited rubygems.org and Chromium is reporting that its SSL
certificate is not trusted. Does this issue occur for anyone else?
Thanks.

4

Works fine for me, too. Suraj, what was the exact URL that you visited when this
occurred?

-Martin

···

Am 28. März 2012 07:26 schrieb Jose Figueroa <josen.figueroa@unixmexico.org>:

I use google chrome Version 19.0.1083.0 canary on Mac OS X Lion..

Everything is working normally.

5

Martin Bosslet wrote in post #1053736:

I use google chromeVersion 19.0.1083.0 canary on Mac OS X Lion..

Everything is working normally.

Works fine for me, too.

Thanks for verifying. The problem must be local to my system then.

what was the exact URL that you visited when this occurred?

Using Chromium 17.0.963.79, I typed "rubygems.org" into the address
bar and it redirected me to "https://rubygems.org/&quot; upon which the
SSL Error warning is shown.

···

Am 28. Mrz 2012 07:26 schrieb Jose Figueroa:

--
Posted via http://www.ruby-forum.com/\.

6

Thanks for verifying. The problem must be local to my system then.

No problem! Yes, I guess so, see below.

what was the exact URL that you visited when this occurred?

Using Chromium 17.0.963.79, I typed "rubygems.org" into the address
bar and it redirected me to "https://rubygems.org/&quot; upon which the
SSL Error warning is shown.

That is strange. Simply typing "rubygems.org" should access
"http://rubygems.org" -
and not redirect you to https automatically... If you type in
"https://rubygems.org"
manually, do you get the same warning?

-Martin

7

Tested with Chrome 18.0.1025.140 and Chromium 19.0.1085.0 on W7 Pro 64,
no problems.

What specific error do you get? Screenshot or pastie?

- Markus

···

On 28.03.2012 16:02, Suraj Kurapati wrote:

Using Chromium 17.0.963.79, I typed "rubygems.org" into the address
bar and it redirected me to "https://rubygems.org/&quot; upon which the
SSL Error warning is shown.

8

Markus Fischer wrote in post #1053773:

What specific error do you get? Screenshot or pastie?

Here is a screencast: http://ompldr.org/vZDZtcw/out.ogv

···

--
Posted via http://www.ruby-forum.com/\.

9

Precedence: bulk
Original-Lines: 15
List-Id: ruby-talk.ruby-lang.org
List-Software: fml [fml 4.0.3 release (20011202/4.0.3)]
List-Post: <mailto:ruby-talk@ruby-lang.org>
List-Owner: <mailto:ruby-talk-admin@ruby-lang.org>
List-Help: <mailto:ruby-talk-ctl@ruby-lang.org?body=help>
List-Unsubscribe: <mailto:ruby-talk-ctl@ruby-lang.org?body=unsubscribe>
Xref: news.gmane.org gmane.comp.lang.ruby.general:351205
Archived-At: <http://permalink.gmane.org/gmane.comp.lang.ruby.general/351205&gt;

···

On 28.03.2012 21:19, Suraj Kurapati wrote:

Markus Fischer wrote in post #1053773:

What specific error do you get? Screenshot or pastie?

Here is a screencast: http://ompldr.org/vZDZtcw/out.ogv

"... or an attacker may be trying to intercept ..."

Is this the only site for which you have https problems?

Is it possible that your ISP/company/goverment watches your internet
traffic? Wouldn't be the first time, but I don't want to jump to
conclusions ..

- Markus

10

Is this the only site for which you have https problems?

Yes, so far.

Is it possible that your ISP/company/goverment watches your internet
traffic? Wouldn't be the first time, but I don't want to jump to
conclusions ..

True. I just tried visiting the website from my computer at work and it
works correctly, so there's definitely something wrong with my computer or
network at home.

Cheers.

···

On Wednesday, March 28, 2012 12:42:19 PM UTC-7, Markus Fischer wrote: