[Bug 25916] SSL cert being lost at captchta page
https://bugzilla.wikimedia.org/show_bug.cgi?id=25916 Arthur Richards changed: What|Removed |Added Status|ASSIGNED|RESOLVED Resolution||FIXED --- Comment #4 from Arthur Richards 2010-11-16 19:22:08 UTC --- This was deployed at 11:20am PST on 11/16/2010. Judging by the minfraud logs on the payments cluster, users are seeing captchas and succesfully passing them. -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 25916] SSL cert being lost at captchta page
https://bugzilla.wikimedia.org/show_bug.cgi?id=25916 --- Comment #3 from Arthur Richards 2010-11-15 22:09:05 UTC --- This is resolved in r76717 of trunk, will be merging to deploy later today with Kaldari's changes -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 25916] SSL cert being lost at captchta page
https://bugzilla.wikimedia.org/show_bug.cgi?id=25916 --- Comment #2 from Arthur Richards 2010-11-15 21:10:20 UTC --- I've now fully identified the issue. The code currently uses $wgProto to determine whether or not to communicate with reCaptcha in HTTPS or HTTP. Becase we are terminating SSL before MediaWiki sees the traffic (on our payments cluster), the protocol is being set to regular HTTP. I am going to add a configurable variable in the DonationInterface to explicitly set whether or not to use HTTPS and update the reCaptcha code to rely on that instead. -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 25916] SSL cert being lost at captchta page
https://bugzilla.wikimedia.org/show_bug.cgi?id=25916 Arthur Richards changed: What|Removed |Added Status|NEW |ASSIGNED --- Comment #1 from Arthur Richards 2010-11-15 20:04:40 UTC --- I have confirmed that there is some SSL issue when a user is presented with a captcha on the credit card form. It appears that communication pulling the captcha interface from reCaptcha is /not/ happening in SSL, which will cause some browser configurations to complain and even to potentially not show non-SSL content. -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
