Bitcoin Forum
April 29, 2017, 11:47:25 PM *
News: If the forum does not load normally for you, please send me a traceroute.
 
   Home   Help Search Donate Login Register  
Pages: [1]
  Print  
Author Topic: MtGox SSL certificate security warning on Android  (Read 3075 times)
Jan
Legendary
*
Offline Offline

Activity: 1042



View Profile
April 01, 2012, 10:15:44 AM
 #1


Visiting https://mtgox.com using the web-browser on my Android 2.2 device gives me a security warning.



Certificate details:



This does not happen on my iPhone, desktop Chrome/Firefox browser.

I don't think that this was the case a few days ago.

I wonder whether they have recently updated their certificate and that it has been issued by a root certificate that my device does not know.

Mycelium let's you hold your private keys private.
1493509645
Hero Member
*
Offline Offline

Posts: 1493509645

View Profile Personal Message (Offline)

Ignore
1493509645
Reply with quote  #2

1493509645
Report to moderator
1493509645
Hero Member
*
Offline Offline

Posts: 1493509645

View Profile Personal Message (Offline)

Ignore
1493509645
Reply with quote  #2

1493509645
Report to moderator
The Bitcoin network protocol was designed to be extremely flexible. It can be used to create timed transactions, escrow transactions, multi-signature transactions, etc. The current features of the client only hint at what will be possible in the future.
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1493509645
Hero Member
*
Offline Offline

Posts: 1493509645

View Profile Personal Message (Offline)

Ignore
1493509645
Reply with quote  #2

1493509645
Report to moderator
rjk
Sr. Member
****
Offline Offline

Activity: 420


1ngldh


View Profile
April 01, 2012, 01:19:45 PM
 #2

The main site's certificate is signed by Verisign, but the socket connection for displaying the current price is served with a StartSSL certificate. Likely, the StartSSL root cert isn't trusted on your device.

Mining Rig Extraordinaire - the Trenton BPX6806 18-slot PCIe backplane [PICS] Dead project is dead, all hail the coming of the mighty ASIC!
paraipan
Legendary
*
Offline Offline

Activity: 924


Firstbits: 1pirata


View Profile WWW
April 01, 2012, 01:24:30 PM
 #3

maybe they forgot to add the intermediate cert For StartSSL, http://www.startssl.com/?app=25#31

BTCitcoin: An Idea Worth Saving - Q&A with bitcoins on rugatu.com - Check my rep
Cusipzzz
Sr. Member
****
Offline Offline

Activity: 313


View Profile
April 01, 2012, 02:17:57 PM
 #4

getting same SSL error on mobile client on android, when trying to see BTC history. Everything else seems to work - weird.
Tritonio
Hero Member
*****
Offline Offline

Activity: 653


Vanity of vanities; all is vanity...


View Profile WWW
April 01, 2012, 11:12:02 PM
 #5

Did anyone tell Mt Gox about this?

grue
Global Moderator
Legendary
*
Offline Offline

Activity: 1974



View Profile
April 02, 2012, 01:01:58 AM
 #6

The main site's certificate is signed by Verisign, but the socket connection for displaying the current price is served with a StartSSL certificate. Likely, the StartSSL root cert isn't trusted on your device.
but it says that the problem cert is issued by verisign

It is pitch black. You are likely to be eaten by a grue.

Tired of annoying signature ads? Ad block for signatures
rjk
Sr. Member
****
Offline Offline

Activity: 420


1ngldh


View Profile
April 02, 2012, 01:15:50 AM
 #7

The main site's certificate is signed by Verisign, but the socket connection for displaying the current price is served with a StartSSL certificate. Likely, the StartSSL root cert isn't trusted on your device.
but it says that the problem cert is issued by verisign
Yeah I noticed that, but I guessed maybe that the "view certificate" dialog defaulted to opening the main site cert, instead of the one that was causing the error. Not sure, but in any case you need to compare the cert fingerprint with one from a trusted computer/connection, and make sure they match.

I had the same issue on my Blackberry until I added the StartSSL CA cert to my trusted roots, and then I stopped getting errors. YMMV.


Mining Rig Extraordinaire - the Trenton BPX6806 18-slot PCIe backplane [PICS] Dead project is dead, all hail the coming of the mighty ASIC!
Jan
Legendary
*
Offline Offline

Activity: 1042



View Profile
April 02, 2012, 07:55:31 PM
 #8

Seems fixed now.

Mycelium let's you hold your private keys private.
Pages: [1]
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!