Author

Topic: Intersango's API SSL cert fails to verify (Read 1355 times)

legendary
Activity: 965
Merit: 1000
July 28, 2012, 07:58:49 AM
#6
java has this issue with Intersango here, too.
full member
Activity: 210
Merit: 100
I began getting cert fails on Intersango and this forum (bitcointalk.org) with Firefox today as well.
rjk
sr. member
Activity: 448
Merit: 250
1ngldh
I emailed Eddy a few times a week or 2 ago about his OCSP servers acting up, and he told me that they found an issue that didn't trigger their monitoring system even though it should have. Sounds like one of the servers in the cluster was low on resources, and I got hit because I have strict OCSP validation turned on. Perhaps this is more of the same and I haven't been hit since I'm using a different server in the cluster.

As far as I know though, it should only affect those that strictly validate OCSP. Has anyone who is affected contacted Eddy about it?
legendary
Activity: 1232
Merit: 1076
Yes, the SSL provider is having uptime difficulties. bitcoin.it (the wiki) also has problems.
sr. member
Activity: 250
Merit: 250
I don't know if the following is related...
I tried today (26/06/2012 08:30 UTC+3) to access Intersango with Firefox (just as any other day for 3 months now) and I got a security warning about the SSL certificate. I had to add an exception to be able to browse the site. Internet Explorer didn't complain though

The same with bitcointalk.org.

Bots sites seem to have gotten their certificates from StartCom
full member
Activity: 235
Merit: 100
I've built small tool with python and requests library, running on top of Intersango's API and had it working happily for past few months, but since few days I get cert error:

requests.exceptions.SSLError: [Errno 1] _ssl.c:503: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed

Same thing if I try to wget it:

ERROR: cannot verify intersango.com's certificate, issued by `/C=IL/O=StartCom Ltd./OU=Secure Digital Certificate Signing/CN=StartCom Class 2 Primary Intermediate Server CA': Unable to locally verify the issuer's authority.

However cert on their website seems to be working, at least no browser complains. Question: is it on my or their end? I don't see any complains on the forum, but also I don't recall doing anything wicked to my machine, so..
Jump to: