not sure where I would file a ticket, but here's what happens:

go to site, you get:

Your connection is not secure
The owner of donate.wikimedia.org.uk has configured their web site
improperly. To protect your information from being stolen, Firefox has
not connected to this web site.
donate.wikimedia.org.uk uses an invalid security certificate. The
certificate is not trusted because the issuer certificate is unknown.
The server might not be sending the appropriate intermediate
certificates. An additional root certificate may need to be imported.
Error code: SEC_ERROR_UNKNOWN_ISSUER

so Michael Maggs may have the necessary intermediate cert already
installed, and I don't (but do in Chromium).

SSL Labs doesn't like it either:
https://www.ssllabs.com/ssltest/analyze.html?d=donate.wikimedia.org.uk&latest
Chain issues Incomplete, Extra certs
Signature algorithm SHA1withRSA   INSECURE
Intermediate certificate has an insecure signature. Upgrade to SHA2 as
soon as possible to avoid browser warnings.

Extra download Gandi Pro SSL CA 2
Fingerprint SHA256:
1f2028716e33584f33fa920a80247beecdc3d7cb26519554c644ce4c4c6077a9
Pin SHA256: XQpYwYiHpVLml4eYccUVEZJpEOh5QrryTkXbWPum2FM=
RSA 2048 bits (e 65537) / SHA384withRSA

Extra download USERTrust RSA Certification Authority
Fingerprint SHA256:
1a5174980a294a528a110726d5855650266c48d9883bea692b67b6d726da98c5
Pin SHA256: x4QzPSC810K5/cMjb05Qm4k3Bw5zBn4lTdO/nEW/Td4=
RSA 4096 bits (e 65537) / SHA384withRSA


- d.



On 15 June 2017 at 12:04, Emmanuel Engelhart
<[email protected]> wrote:
> Hi
>
> Please open a ticket for that and explain exactly what goes wrong. I'll
> have a look this WE.
>
> Emmanuel
>
> On 15.06.2017 12:52, David Gerard wrote:
>> Update to Firefox 54 (just hit the Ubuntu repos today) and see what it does?
>>
>> On 15 June 2017 at 11:37, Michael Maggs <[email protected]
>> <mailto:[email protected]>> wrote:
>>
>>     This seems to be a really odd and annoying error. I've come across
>>     it several times myself, using Firefox, but this time I had no
>>     problems with the certificate. I'm running Firefox for Mac 53.0.3 on
>>     MacOS Sierra.
>>
>>     Michael
>>
>>>     David Gerard <mailto:[email protected]>
>>>     15 June 2017 at 10:28 am
>>>     Just renewed my WMUK membership, and Firefox balked at the SSL
>>>     certificate. The cert doesn't expire until 2019, but Firefox 54
>>>     doesn't like it.
>>>
>>>     Oddly, Chromium 58 is fine with it.
>>>
>>>     Can anyone see what's wrong, which CA Firefox doesn't like any
>>>     more etc?
>>>
>>>
>>>     - d.
>>>
>>>
>>>     _______________________________________________
>>>     Wikimedia UK mailing list
>>>     [email protected] <mailto:[email protected]>
>>>     https://lists.wikimedia.org/mailman/listinfo/wikimediauk-l
>>>     <https://lists.wikimedia.org/mailman/listinfo/wikimediauk-l>
>>>     WMUK: https://wikimedia.org.uk
>>
>>
>>     _______________________________________________
>>     Wikimedia UK mailing list
>>     [email protected] <mailto:[email protected]>
>>     https://lists.wikimedia.org/mailman/listinfo/wikimediauk-l
>>     <https://lists.wikimedia.org/mailman/listinfo/wikimediauk-l>
>>     WMUK: https://wikimedia.org.uk
>>
>>
>
>
> --
> Emmanuel Engelhart
> Software Development Expert
> Zurich, Switzerland
> +41 797 670 398

_______________________________________________
Wikimedia UK mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikimediauk-l
WMUK: https://wikimedia.org.uk

Reply via email to