Bitcoin Forum
April 25, 2024, 08:26:18 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: Did TradeHill change their SSL certificate?  (Read 1289 times)
BitSense Informatics (OP)
Member
**
Offline Offline

Activity: 78
Merit: 10


View Profile WWW
August 19, 2011, 05:23:41 AM
 #1

Safari is now telling me it doesn't trust the ssl certificate on the TradeHill and my java API application is telling me that it doesn't recognize the Root certificate. I've sent a query to TradeHill tech support but was wondering if anyone else has noticed any issues.

"Your bitcoin is secured in a way that is physically impossible for others to access, no matter for what reason, no matter how good the excuse, no matter a majority of miners, no matter what." -- Greg Maxwell
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1714033578
Hero Member
*
Offline Offline

Posts: 1714033578

View Profile Personal Message (Offline)

Ignore
1714033578
Reply with quote  #2

1714033578
Report to moderator
1714033578
Hero Member
*
Offline Offline

Posts: 1714033578

View Profile Personal Message (Offline)

Ignore
1714033578
Reply with quote  #2

1714033578
Report to moderator
1714033578
Hero Member
*
Offline Offline

Posts: 1714033578

View Profile Personal Message (Offline)

Ignore
1714033578
Reply with quote  #2

1714033578
Report to moderator
Maged
Legendary
*
Offline Offline

Activity: 1204
Merit: 1015


View Profile
August 19, 2011, 06:26:29 AM
 #2

That is concerning, especially since this would be the best time to hack a Bitcoin site (or at least its domain) since everyone in the Bitcoin world is in NYC for the Bitcoin conference. I would advise not logging in until the conference has concluded or we have heard from someone at Tradehill that can be verified. Most likely nothing is amiss, but it's hard to say with all the hackers we have here.

garton
Newbie
*
Offline Offline

Activity: 13
Merit: 0


View Profile
August 19, 2011, 06:31:19 AM
 #3

Chrome doesn't say anything about a new certificate, nor that it doesn't trust it. What page to you go to? Front page?
Kermee
Full Member
***
Offline Offline

Activity: 154
Merit: 100



View Profile
August 19, 2011, 06:58:54 AM
 #4

Looks like a new wildcard cert was issued 08/11/2011, 7 days ago...

Cheers,
Kermee
EricJ2190
Full Member
***
Offline Offline

Activity: 134
Merit: 102


View Profile
August 19, 2011, 07:16:17 AM
 #5

I get no error. The SHA1 fingerprint of the certificate I get is bf5d728ac70686806c6fe7da2a7f1fe98daf98f1.
Kermee
Full Member
***
Offline Offline

Activity: 154
Merit: 100



View Profile
August 19, 2011, 07:23:02 AM
 #6

I get no error. The SHA1 fingerprint of the certificate I get is bf5d728ac70686806c6fe7da2a7f1fe98daf98f1.

I've got the same fingerprint here. -- Looks legit.

Safari is now telling me it doesn't trust the ssl certificate on the TradeHill and my java API application is telling me that it doesn't recognize the Root certificate. I've sent a query to TradeHill tech support but was wondering if anyone else has noticed any issues.

Try loading this page:

https://www.sffutureroot.com/

Do you get a similar error?

Cheers,
Kermee
Grouver (BtcBalance)
Hero Member
*****
Offline Offline

Activity: 530
Merit: 500



View Profile WWW
August 19, 2011, 09:32:40 AM
 #7

At my end Chrome says the SSL certificate is legit but the page contains data that is not loaded in via HTTPS and may be insecure.
This is only when your logged in though.

Jered Kenna (TradeHill)
Sr. Member
****
Offline Offline

Activity: 420
Merit: 250



View Profile WWW
August 19, 2011, 01:44:57 PM
 #8

Good Morning Folks,

We are aware of this issue and working on it today. Basically, the new web server software we're using isn't properly sending the entire certificate chain and therefore some browsers do not trust our certificate. The cause of this was the reconfiguration of our data center that took place yesterday.

Regards,
Adam - Tradehill

moneyandtech.com
@moneyandtech @jeredkenna
Phinnaeus Gage
Legendary
*
Offline Offline

Activity: 1918
Merit: 1570


Bitcoin: An Idea Worth Spending


View Profile WWW
August 19, 2011, 01:49:31 PM
 #9

Good Morning Folks,

We are aware of this issue and working on it today. Basically, the new web server software we're using isn't properly sending the entire certificate chain and therefore some browsers do not trust our certificate. The cause of this was the reconfiguration of our data center that took place yesterday.

Regards,
Adam - Tradehill


+1

That's how customer service is supposed to work.
BitSense Informatics (OP)
Member
**
Offline Offline

Activity: 78
Merit: 10


View Profile WWW
August 19, 2011, 02:12:51 PM
 #10

Ok thanks Adam.  I was hoping nothing was amiss, but just wanted to be extra careful, especially given recent events.

Rob

Grouver (BtcBalance)
Hero Member
*****
Offline Offline

Activity: 530
Merit: 500



View Profile WWW
August 19, 2011, 02:35:45 PM
 #11

Good Morning Folks,

We are aware of this issue and working on it today. Basically, the new web server software we're using isn't properly sending the entire certificate chain and therefore some browsers do not trust our certificate. The cause of this was the reconfiguration of our data center that took place yesterday.

Regards,
Adam - Tradehill


+1

That's how customer service is supposed to work.
I second that!
Awesome stuff.

Now I hope they will return my email these days. Sad

Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!