Python Forum
The python DOT org cert problem and a new Firefox - Printable Version

+- Python Forum (https://python-forum.io)
+-- Forum: General (https://python-forum.io/forum-1.html)
+--- Forum: News and Discussions (https://python-forum.io/forum-31.html)
+--- Thread: The python DOT org cert problem and a new Firefox (/thread-6351.html)

Pages: 1 2


The python DOT org cert problem and a new Firefox - Skaperen - Nov-18-2017

i got a new version of Firefox with my weekly upgrade today (which made it take several minutes, so i knew something big came in) and so i tried it on python DOT org (typing in just the plain domain name instead of a URL) and now it works, but the "www." was added automatically.  typing in a full URL without the "www." still fails.   the cert is still incorrect.  it would be nice if all browsers would try adding "www.", if without it fails, like this.

i install Opera, again, and tried it.  typing in just the domain name fails. adding "www." works.  typing in the plain domain name again (intended to get a screen capture) works.  Opera learned there is a working alternate by having seen it before.  but it can still be a problem for people typing in just the plain domain name.  at least the error message is better than what Firefox has.

i made two screen captures of Opera, the 2nd after clicking on the "help me understand" button.  there is no clear way to make an exception.

http://linuxhomepage.com/free/python-dot-org-on-opera-0.gif

http://linuxhomepage.com/free/python-dot-org-on-opera-1.gif

the sha256 checksums of these two GIF files are:
Output:
7f14809229b472ac137fb0305d46fecd51bbfa9552f942571716f8084f6cbb3a  python-dot-org-on-opera-0.gif ff86909f5482396ee97e17ae66b0be35ae3f559b38fb0015658c7e76864e4fcc  python-dot-org-on-opera-1.gif



RE: The python DOT org cert problem and a new Firefox - metulburr - Nov-18-2017

link from post of other discussion
https://python-forum.io/Thread-code-to-run-in-python3?pid=30429#pid30429

1) did you post on the github python.org site issues and/or get a response?
2) Are you using a public wifi?
3) Do you have a second device to try going to the site. Completely different device, not a dual boot or something.
4) Do you have a firewall setup? sudo ufw status

Im pretty sure its on your end otherwise there would be a ton of traffic regarding it on IRC, reddit, etc.

EDIT:
just got that you got it with www. Im not sure because any browser i use, any url i put it, auto goes to the correct one.


RE: The python DOT org cert problem and a new Firefox - Skaperen - Nov-18-2017

no. i can't post on github.  i don't remember the issue but i couldn't sign up on that sitel.  the cert very clearly omits the plain domain name.

it is a free wifi where i live and i am going through a VPN to get IPv6.

no 2nd device ready to go.

no firewall.


RE: The python DOT org cert problem and a new Firefox - metulburr - Nov-18-2017

I installed a fresh browser.... any and all lead to the correct site without qa cert error for me

python.org
www.python.org
http://python.org
https://python.org
https://wwww.python.org

I tried on firefox too and got no issue either.


RE: The python DOT org cert problem and a new Firefox - metulburr - Nov-18-2017

Quote:i am going through a VPN to get IPv6
Can you directly go there then without an issue?


RE: The python DOT org cert problem and a new Firefox - Skaperen - Nov-18-2017

chrome auto adds "www." even if you type in a full explicit URL that begins with "https:" and has "//" after that?


RE: The python DOT org cert problem and a new Firefox - metulburr - Nov-18-2017

yeah whatever i type i always get redirected to exact url of
https://www.python.org/
but that happens on firefox too


RE: The python DOT org cert problem and a new Firefox - Skaperen - Nov-18-2017

i turned off VPN and IPv6 yesterday and things behaved exactly the same.  it still fails on lynx in URL form without the "www." and succeeds with "www.".  lynx does not handle plain domain names ... it always wants full URLs.

do any other sites (such as linuxhomepage DOT com) not do the "www." add on?


RE: The python DOT org cert problem and a new Firefox - metulburr - Nov-18-2017

Quote:it is a free wifi where i live and i am going through a VPN to get IPv6.
So there is any number of people on your router?
I would also setup a firewall ASAP.


RE: The python DOT org cert problem and a new Firefox - Skaperen - Nov-18-2017

several people.  i don't know the exact number.  it is connected via 4 bonded DSLs.

once i was finally able to see the cert information (by magnifying a screen capture  ... my vision is too poor to see it in the tiny font Firefox put it in) i could see the problem.  it was a multi-name cert that lacked the name that is in the same form as the domain name itself.

when some gets a cert signed by a CA, it is the PUBLIC half they submit to the CA and get back with the signature.  this can safely be made available to others to look at (it happens as part of the RSA exchange) their server has to have the PRIVATE half.  there is no signature applied to it.  they must keep it secure.

i'm going over to reddit, now, and later to do some coding (tweaking a script to generate background screen sessions of a specified size).