Bitcoin Forum

Bitcoin => Bitcoin Technical Support => Topic started by: notme on April 12, 2013, 11:58:29 PM



Title: *.mtgox.com certificate expired
Post by: notme on April 12, 2013, 11:58:29 PM
My API usage was working fine an hour ago, but all the sudden I am getting this:
SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed

This[1] suggests adding a .pem file from haxx.se to fix it, which I tried, but it didn't seem to work.  I'm not sure I trust this random cert, so I deleted it.

1. https://github.com/sferik/mtgox/issues/21

Any ideas?

It's expired.


Title: Re: MtGox Certificate Change?
Post by: grue on April 13, 2013, 12:06:31 AM
it's expired
Quote
        www.mtgox.com uses an invalid security certificate.

The certificate expired on 4/12/2013 7:40 PM. The current time is 4/12/2013 8:07 PM.


Title: Re: MtGox Certificate Change?
Post by: scintill on April 13, 2013, 12:07:06 AM
I agree with grue, from trying to browse to https://api.mtgox.com/.

Looks like you can either find a way to trust the certificate even though it's expired, or wait for them to publish a new one.


Title: Re: MtGox Certificate Change?
Post by: notme on April 13, 2013, 12:08:06 AM
it's expired
Quote
       www.mtgox.com uses an invalid security certificate.

The certificate expired on 4/12/2013 7:40 PM. The current time is 4/12/2013 8:07 PM.

facepalm


thanks


Edit: at least http://mtgox.com still works, it seems it uses a separate cert than everything else


Title: Re: *.mtgox.com certificate expired
Post by: scintill on April 13, 2013, 12:24:51 AM
Interesting, it seems to affect https://www.mtgox.com/ too:

Quote
Certificate Subject Alternative Name:
DNS Name: www.mtgox.com
DNS Name: mtgox.com
DNS Name: *.mtgox.com

But apparently they serve a new one on .mtgox.com.  Bad timing for "scary certificate errors" popping up in browsers to https://www.mtgox.com.  Maybe nobody would end up there, since http://www.mtgox.com/ redirects to https://mtgox.com/ with no errors.


Title: Re: *.mtgox.com certificate expired
Post by: grue on April 13, 2013, 12:50:06 AM
mtgox.com = OK
*.mtgox.com = expired