[tor-bugs] #22855 [Applications/Tor Browser]: SSL Auth broken

Tor Bug Tracker & Wiki blackhole at torproject.org
Mon Jul 10 19:22:45 UTC 2017


#22855: SSL Auth broken
--------------------------------------+-----------------------------------
 Reporter:  bugster                   |          Owner:  tbb-team
     Type:  defect                    |         Status:  needs_information
 Priority:  High                      |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Major                     |     Resolution:
 Keywords:                            |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+-----------------------------------

Comment (by bugster):

 Yes, only this:

 {{{

 'mytorwebsite.onion:443 uses an invalid security certificate.

 The certificate is not trusted because it is self-signed.
 The certificate is not valid for the name mytorwebsite.onion.
 The certificate expired on 05/18/2017 08:15 PM. The current time is
 07/10/2017 05:10 PM.

 Error code: <a id="errorCode"
 title="SEC_ERROR_UNKNOWN_ISSUER">SEC_ERROR_UNKNOWN_ISSUER</a>

   (unknown)'
 }}}
 But in browser window i see:

 {{{

 Secure Connection Failed

 An error occurred during a connection to mytorwebsite.onion. security
 library failure. Error code: SEC_ERROR_LIBRARY_FAILURE

   The  page you are trying to view cannot be shown because the
 authenticity of  the received data could not be verified.Please contact
 the website  owners to inform them of this problem.
 }}}


 It's my test website and self-signed certificate. 6.* still works fine.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/22855#comment:4>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list