Bitcoin Forum

Economy => Securities => Topic started by: jothan on May 14, 2012, 08:31:50 PM



Title: GLBSE certificate mismatch on static.glbse.com
Post by: jothan on May 14, 2012, 08:31:50 PM
The CSS and javascript went away for me on GLBSE. Looking with the Chrome webpage debugger, I see that the requests for the CSS and JS are hosted on an ip with a certificate mismatch. The faulty URLs start with https://static.glbse.com/.

This means anyone with a sane browser will be missing all the AJAX stuff necessary to buy and sell securities.

nefario, can you advise ?

Edit: I am now getting an SSL error on https://glbse.com/ too ! Ignoring the warning seems to work, but I would rather not risk logging in.
Edit 2: I flushed my DNS caches and everything seems ok now when using https://www.glbse.com/.

Certificate chain:

gnutls-cli static.glbse.com --port 443
Resolving 'static.glbse.com'...
Connecting to '199.27.135.223:443'...
- Session ID: 56:E7:21:F1:7C:37:AF:BA:E7:F5:32:FB:D0:3C:60:29:E5:C2:12:7C:6D:AB:EE:1A:AB:AA:B9:A5:E1:6C:52:EA
- Certificate type: X.509
 - Got a certificate list of 2 certificates.
 - Certificate[0] info:
  - subject `C=US,ST=CA,L=San Francisco,O=CloudFlare\, Inc.,CN=ssl2402.cloudflare.com', issuer `C=BE,O=GlobalSign nv-sa,CN=GlobalSign Organization Validation CA - G2', RSA key 2048 bits, signed using RSA-SHA1, activated `2012-05-14 11:39:11 UTC', expires `2016-10-05 15:04:02 UTC', SHA-1 fingerprint `732863bc659c2c06707e66c4ff573e2bfdcbb1fc'
 - Certificate[1] info:
  - subject `C=BE,O=GlobalSign nv-sa,CN=GlobalSign Organization Validation CA - G2', issuer `C=BE,O=GlobalSign nv-sa,OU=Root CA,CN=GlobalSign Root CA', RSA key 2048 bits, signed using RSA-SHA1, activated `2011-04-13 10:00:00 UTC', expires `2022-04-13 10:00:00 UTC', SHA-1 fingerprint `b9ee85a10fd495d994ed63488ab74a18cb8e6bfa'
- The hostname in the certificate does NOT match 'static.glbse.com'



Title: Re: GLBSE certificate mismatch on static.glbse.com
Post by: Nefario on May 14, 2012, 08:51:16 PM
Hey jothan,

we've just turned on cloudflare for GLBSE, there are some issues with the SSL cerfiticates at the moment which is something we have to wait for cloudflare to fix.

In the meantime it's safe to login to glbse.com


Title: Re: GLBSE certificate mismatch on static.glbse.com
Post by: jothan on May 14, 2012, 09:02:17 PM
Ok, thanks.

Looks like you are using a new wildcard certificate, nice !


Title: Re: GLBSE certificate mismatch on static.glbse.com
Post by: drakahn on May 15, 2012, 02:46:00 AM
Hey jothan,

we've just turned on cloudflare for GLBSE, there are some issues with the SSL cerfiticates at the moment which is something we have to wait for cloudflare to fix.

In the meantime it's safe to login to glbse.com

it won't let me log in...