Last modified: 2013-03-09 01:05:14 UTC

Wikimedia Bugzilla is closed!

Wikimedia migrated from Bugzilla to Phabricator. Bug reports are handled in Wikimedia Phabricator.
This static website is read-only and for historical purposes. It is not possible to log in and except for displaying bug reports and their history, links might be broken. See T35293, the corresponding Phabricator task for complete and up-to-date bug report information.
Bug 33293 - Certificate security warning for https://en.planet.wikimedia.org
Certificate security warning for https://en.planet.wikimedia.org
Status: RESOLVED FIXED
Product: Wikimedia
Classification: Unclassified
Planet (Other open bugs)
unspecified
All All
: Lowest minor (vote)
: ---
Assigned To: Nobody - You can work on this!
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2011-12-21 05:32 UTC by billinghurst
Modified: 2013-03-09 01:05 UTC (History)
6 users (show)

See Also:
Web browser: ---
Mobile Platform: ---
Assignee Huggle Beta Tester: ---


Attachments

Description billinghurst 2011-12-21 05:32:39 UTC
This Connection is Untrusted
      
      
      
      
        
          You have asked Firefox to connect
securely to en.planet.wikimedia.org, but we can't confirm that your connection is secure.
          Normally, when you try to connect securely,
sites will present trusted identification to prove that you are
going to the right place. However, this site's identity can't be verified.
        
        
        
          What Should I Do?
          
            If you usually connect to
this site without problems, this error could mean that someone is
trying to impersonate the site, and you shouldn't continue.
            
          
        
        
        
        
          Technical Details
          en.planet.wikimedia.org uses an invalid security certificate.

The certificate is only valid for the following names:
  *.wikimedia.org , wikimedia.org  

(Error code: ssl_error_bad_cert_domain)
Comment 1 Mark A. Hershberger 2011-12-21 18:59:08 UTC
SSL on planet isn't really going to be supported right now.  At least you aren't being redirected to a non-planet website.

From https://rt.wikimedia.org/Ticket/Display.html?id=1854#txn-44455, CT Woo says:

 Per discussion in EMGT, let's take off https for planet.wikimedia.org for the
 time being.

Adding ctwoo to see if he has anything else to add.  Otherwise, resolving this later.
Comment 2 billinghurst 2011-12-22 12:24:24 UTC
Then someone from the technical department may wish to address ...

https://en.wikipedia.org/wiki/Wikipedia:Wikipedia_Signpost/2011-12-19/Technology_report

No more planetary problems on https: With the resolution of bug #32028, visitors attempting to view certain Wikimedia blog "planets" will no longer be redirected away from the main site when trying (manually or automatically) to switch to the secure, https version of the site.
Comment 3 Andre Klapper 2012-11-17 17:27:03 UTC
"now the website will go through key exchange (sadly still with the
warning) and then redirect you to to the unencrypted equivalent page."

So the original issue is still valid, but this might be a WONTFIX.
Comment 4 Daniel Zahn 2013-01-25 23:00:29 UTC
We are going to support SSL on planet in a little while now. Actually we got approval to buy a wildcard cert just for *.planet and this is being ordered now.
Comment 5 Daniel Zahn 2013-01-25 23:01:07 UTC
P.S. Planet is an IPv6-enabled service since yesterday.
Comment 6 Andre Klapper 2013-01-25 23:35:54 UTC
(In reply to comment #4)
> We are going to support SSL on planet in a little while now. Actually we got
> approval to buy a wildcard cert just for *.planet and this is being ordered
> now.

Is there a corresponding RT ticket or such?
Comment 7 Daniel Zahn 2013-01-25 23:41:52 UTC
yes. https://rt.wikimedia.org/Ticket/Display.html?id=3481
Comment 8 Daniel Zahn 2013-03-09 01:05:14 UTC
resolved.

https://en.planet.wikimedia.org/

using a *.planet certificate

Note You need to log in before you can comment on or make changes to this bug.


Navigation
Links