Bitcoin Forum
December 08, 2016, 12:14:41 PM *
News: To be able to use the next phase of the beta forum software, please ensure that your email address is correct/functional.
 
   Home   Help Search Donate Login Register  
Pages: [1]
  Print  
Author Topic: Did TradeHill change their SSL certificate?  (Read 1131 times)
BitSense Informatics
Member
**
Offline Offline

Activity: 77


View Profile WWW
August 19, 2011, 05:23:41 AM
 #1

Safari is now telling me it doesn't trust the ssl certificate on the TradeHill and my java API application is telling me that it doesn't recognize the Root certificate. I've sent a query to TradeHill tech support but was wondering if anyone else has noticed any issues.

1481199281
Hero Member
*
Offline Offline

Posts: 1481199281

View Profile Personal Message (Offline)

Ignore
1481199281
Reply with quote  #2

1481199281
Report to moderator
1481199281
Hero Member
*
Offline Offline

Posts: 1481199281

View Profile Personal Message (Offline)

Ignore
1481199281
Reply with quote  #2

1481199281
Report to moderator
1481199281
Hero Member
*
Offline Offline

Posts: 1481199281

View Profile Personal Message (Offline)

Ignore
1481199281
Reply with quote  #2

1481199281
Report to moderator
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1481199281
Hero Member
*
Offline Offline

Posts: 1481199281

View Profile Personal Message (Offline)

Ignore
1481199281
Reply with quote  #2

1481199281
Report to moderator
1481199281
Hero Member
*
Offline Offline

Posts: 1481199281

View Profile Personal Message (Offline)

Ignore
1481199281
Reply with quote  #2

1481199281
Report to moderator
1481199281
Hero Member
*
Offline Offline

Posts: 1481199281

View Profile Personal Message (Offline)

Ignore
1481199281
Reply with quote  #2

1481199281
Report to moderator
Maged
Legendary
*
Offline Offline

Activity: 1260


View Profile
August 19, 2011, 06:26:29 AM
 #2

That is concerning, especially since this would be the best time to hack a Bitcoin site (or at least its domain) since everyone in the Bitcoin world is in NYC for the Bitcoin conference. I would advise not logging in until the conference has concluded or we have heard from someone at Tradehill that can be verified. Most likely nothing is amiss, but it's hard to say with all the hackers we have here.

garton
Newbie
*
Offline Offline

Activity: 13


View Profile
August 19, 2011, 06:31:19 AM
 #3

Chrome doesn't say anything about a new certificate, nor that it doesn't trust it. What page to you go to? Front page?
Kermee
Full Member
***
Offline Offline

Activity: 140



View Profile
August 19, 2011, 06:58:54 AM
 #4

Looks like a new wildcard cert was issued 08/11/2011, 7 days ago...

Cheers,
Kermee

EricJ2190
Full Member
***
Offline Offline

Activity: 134


View Profile
August 19, 2011, 07:16:17 AM
 #5

I get no error. The SHA1 fingerprint of the certificate I get is bf5d728ac70686806c6fe7da2a7f1fe98daf98f1.
Kermee
Full Member
***
Offline Offline

Activity: 140



View Profile
August 19, 2011, 07:23:02 AM
 #6

I get no error. The SHA1 fingerprint of the certificate I get is bf5d728ac70686806c6fe7da2a7f1fe98daf98f1.

I've got the same fingerprint here. -- Looks legit.

Safari is now telling me it doesn't trust the ssl certificate on the TradeHill and my java API application is telling me that it doesn't recognize the Root certificate. I've sent a query to TradeHill tech support but was wondering if anyone else has noticed any issues.

Try loading this page:

https://www.sffutureroot.com/

Do you get a similar error?

Cheers,
Kermee

Grouver (BtcBalance)
Hero Member
*****
Offline Offline

Activity: 530



View Profile WWW
August 19, 2011, 09:32:40 AM
 #7

At my end Chrome says the SSL certificate is legit but the page contains data that is not loaded in via HTTPS and may be insecure.
This is only when your logged in though.

Jered Kenna (TradeHill)
Sr. Member
****
Offline Offline

Activity: 420



View Profile WWW
August 19, 2011, 01:44:57 PM
 #8

Good Morning Folks,

We are aware of this issue and working on it today. Basically, the new web server software we're using isn't properly sending the entire certificate chain and therefore some browsers do not trust our certificate. The cause of this was the reconfiguration of our data center that took place yesterday.

Regards,
Adam - Tradehill

moneyandtech.com
@moneyandtech @jeredkenna
Phinnaeus Gage
Legendary
*
Offline Offline

Activity: 1302


Bitcoin: An Idea Worth Spending


View Profile
August 19, 2011, 01:49:31 PM
 #9

Good Morning Folks,

We are aware of this issue and working on it today. Basically, the new web server software we're using isn't properly sending the entire certificate chain and therefore some browsers do not trust our certificate. The cause of this was the reconfiguration of our data center that took place yesterday.

Regards,
Adam - Tradehill


+1

That's how customer service is supposed to work.
BitSense Informatics
Member
**
Offline Offline

Activity: 77


View Profile WWW
August 19, 2011, 02:12:51 PM
 #10

Ok thanks Adam.  I was hoping nothing was amiss, but just wanted to be extra careful, especially given recent events.

Rob

Grouver (BtcBalance)
Hero Member
*****
Offline Offline

Activity: 530



View Profile WWW
August 19, 2011, 02:35:45 PM
 #11

Good Morning Folks,

We are aware of this issue and working on it today. Basically, the new web server software we're using isn't properly sending the entire certificate chain and therefore some browsers do not trust our certificate. The cause of this was the reconfiguration of our data center that took place yesterday.

Regards,
Adam - Tradehill


+1

That's how customer service is supposed to work.
I second that!
Awesome stuff.

Now I hope they will return my email these days. Sad

Pages: [1]
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!