Bitcoin Forum

I've built small tool with python and requests library, running on top of Intersango's API and had it working happily for past few months, but since few days I get cert error:

requests.exceptions.SSLError: [Errno 1] _ssl.c:503: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed

Same thing if I try to wget it:

ERROR: cannot verify intersango.com's certificate, issued by `/C=IL/O=StartCom Ltd./OU=Secure Digital Certificate Signing/CN=StartCom Class 2 Primary Intermediate Server CA': Unable to locally verify the issuer's authority.

However cert on their website seems to be working, at least no browser complains. Question: is it on my or their end? I don't see any complains on the forum, but also I don't recall doing anything wicked to my machine, so..

I don't know if the following is related...
I tried today (26/06/2012 08:30 UTC+3) to access Intersango with Firefox (just as any other day for 3 months now) and I got a security warning about the SSL certificate. I had to add an exception to be able to browse the site. Internet Explorer didn't complain though

The same with bitcointalk.org.

Bots sites seem to have gotten their certificates from StartCom

Yes, the SSL provider is having uptime difficulties. bitcoin.it (the wiki) also has problems.

I emailed Eddy a few times a week or 2 ago about his OCSP servers acting up, and he told me that they found an issue that didn't trigger their monitoring system even though it should have. Sounds like one of the servers in the cluster was low on resources, and I got hit because I have strict OCSP validation turned on. Perhaps this is more of the same and I haven't been hit since I'm using a different server in the cluster.

As far as I know though, it should only affect those that strictly validate OCSP. Has anyone who is affected contacted Eddy about it?

I began getting cert fails on Intersango and this forum (bitcointalk.org) with Firefox today as well.

java has this issue with Intersango here, too.