Bitcoin Forum
December 11, 2016, 08:19:27 AM *
News: To be able to use the next phase of the beta forum software, please ensure that your email address is correct/functional.
 
   Home   Help Search Donate Login Register  
Pages: [1]
  Print  
Author Topic: MtGox SSL certificate security warning on Android  (Read 3015 times)
Jan
Legendary
*
Offline Offline

Activity: 1042



View Profile
April 01, 2012, 10:15:44 AM
 #1


Visiting https://mtgox.com using the web-browser on my Android 2.2 device gives me a security warning.



Certificate details:



This does not happen on my iPhone, desktop Chrome/Firefox browser.

I don't think that this was the case a few days ago.

I wonder whether they have recently updated their certificate and that it has been issued by a root certificate that my device does not know.

Mycelium let's you hold your private keys private.
1481444367
Hero Member
*
Offline Offline

Posts: 1481444367

View Profile Personal Message (Offline)

Ignore
1481444367
Reply with quote  #2

1481444367
Report to moderator
1481444367
Hero Member
*
Offline Offline

Posts: 1481444367

View Profile Personal Message (Offline)

Ignore
1481444367
Reply with quote  #2

1481444367
Report to moderator
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1481444367
Hero Member
*
Offline Offline

Posts: 1481444367

View Profile Personal Message (Offline)

Ignore
1481444367
Reply with quote  #2

1481444367
Report to moderator
1481444367
Hero Member
*
Offline Offline

Posts: 1481444367

View Profile Personal Message (Offline)

Ignore
1481444367
Reply with quote  #2

1481444367
Report to moderator
1481444367
Hero Member
*
Offline Offline

Posts: 1481444367

View Profile Personal Message (Offline)

Ignore
1481444367
Reply with quote  #2

1481444367
Report to moderator
rjk
Sr. Member
****
Offline Offline

Activity: 420


1ngldh


View Profile
April 01, 2012, 01:19:45 PM
 #2

The main site's certificate is signed by Verisign, but the socket connection for displaying the current price is served with a StartSSL certificate. Likely, the StartSSL root cert isn't trusted on your device.

Mining Rig Extraordinaire - the Trenton BPX6806 18-slot PCIe backplane [PICS] Dead project is dead, all hail the coming of the mighty ASIC!
paraipan
Legendary
*
Offline Offline

Activity: 924


Firstbits: 1pirata


View Profile WWW
April 01, 2012, 01:24:30 PM
 #3

maybe they forgot to add the intermediate cert For StartSSL, http://www.startssl.com/?app=25#31

BTCitcoin: An Idea Worth Saving - Q&A with bitcoins on rugatu.com - Check my rep
Cusipzzz
Sr. Member
****
Offline Offline

Activity: 300


View Profile
April 01, 2012, 02:17:57 PM
 #4

getting same SSL error on mobile client on android, when trying to see BTC history. Everything else seems to work - weird.

http://BTCSportsBet.com - The most complete bitcoin Sportsbook - All games from pro and college sports, Champions League, E-Sports, and reduced juice as well!
Tritonio
Hero Member
*****
Offline Offline

Activity: 652


Vanity of vanities; all is vanity...


View Profile WWW
April 01, 2012, 11:12:02 PM
 #5

Did anyone tell Mt Gox about this?

grue
Global Moderator
Legendary
*
Offline Offline

Activity: 1932



View Profile
April 02, 2012, 01:01:58 AM
 #6

The main site's certificate is signed by Verisign, but the socket connection for displaying the current price is served with a StartSSL certificate. Likely, the StartSSL root cert isn't trusted on your device.
but it says that the problem cert is issued by verisign

It is pitch black. You are likely to be eaten by a grue.

Tired of annoying signature ads? Ad block for signatures
rjk
Sr. Member
****
Offline Offline

Activity: 420


1ngldh


View Profile
April 02, 2012, 01:15:50 AM
 #7

The main site's certificate is signed by Verisign, but the socket connection for displaying the current price is served with a StartSSL certificate. Likely, the StartSSL root cert isn't trusted on your device.
but it says that the problem cert is issued by verisign
Yeah I noticed that, but I guessed maybe that the "view certificate" dialog defaulted to opening the main site cert, instead of the one that was causing the error. Not sure, but in any case you need to compare the cert fingerprint with one from a trusted computer/connection, and make sure they match.

I had the same issue on my Blackberry until I added the StartSSL CA cert to my trusted roots, and then I stopped getting errors. YMMV.


Mining Rig Extraordinaire - the Trenton BPX6806 18-slot PCIe backplane [PICS] Dead project is dead, all hail the coming of the mighty ASIC!
Jan
Legendary
*
Offline Offline

Activity: 1042



View Profile
April 02, 2012, 07:55:31 PM
 #8

Seems fixed now.

Mycelium let's you hold your private keys private.
Pages: [1]
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!