Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Firefox: Untrusted Connection when trying to get onto sites


  • Please log in to reply
7 replies to this topic

#1 jayunch

jayunch

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Local time:01:30 PM

Posted 29 July 2013 - 02:14 PM

For a long time, I've had an issue with mainly firefox (though once in awhile google chrome and cometbird will also do this, but only rarely) where when I try to get onto sites like:

 

Facebook

Tumblr

Twitter

Google

etc

 

it will give me a warning that says "This Connection is Untrusted."

 

Sooner or later, the message itself will disappear and let me onto the site, but it has been happening much more frequently now and I have no idea why. I've run Malware Antimalware and it it tells me there's nothing wrong.

 

Underneath the technical details, it says:

 

www.tumblr.com uses an invalid security certificate.

The certificate is only valid for the following names:
  mail.live.com , m.mail.live.com , contacts.live.com , hotmail.co.jp , hotmail.co.uk , hotmail.com , hotmail.live.com , hotmail.msn.com , people.live.com , www.hotmail.com , www.hotmail.msn.com , www.mail.live.com , home.live.com , www.live.com , dvt.mail.live.com , blu002.afx.ms , blu002.mail.live.com , blu150.afx.ms , blu150.mail.live.com , blu151.afx.ms , blu151.mail.live.com , blu152.afx.ms , blu152.mail.live.com , blu153.afx.ms , blu153.mail.live.com , blu154.afx.ms , blu154.mail.live.com , blu155.afx.ms , blu155.mail.live.com , blu156.afx.ms , blu156.mail.live.com , blu157.afx.ms , blu157.mail.live.com , blu158.afx.ms , blu158.mail.live.com , blu159.afx.ms , blu159.mail.live.com , blu160.afx.ms , blu160.mail.live.com , blu161.afx.ms , blu161.mail.live.com , blu162.afx.ms , blu162.mail.live.com , blu163.afx.ms , blu163.mail.live.com , blu164.afx.ms , blu164.mail.live.com , blu165.afx.ms , blu165.mail.live.com , blu166.afx.ms , blu166.mail.live.com , blu167.afx.ms , blu167.mail.live.com , blu168.afx.ms , blu168.mail.live.com , blu169.afx.ms , blu169.mail.live.com , blu170.afx.ms , blu170.mail.live.com , blu171.afx.ms , blu171.mail.live.com , blu172.afx.ms , blu172.mail.live.com , blu173.afx.ms , blu173.mail.live.com , blu174.afx.ms , blu174.mail.live.com , blu175.afx.ms , blu175.mail.live.com , blu176.afx.ms , blu176.mail.live.com , blu177.afx.ms , blu177.mail.live.com , blu178.afx.ms , blu178.mail.live.com , blu179.afx.ms , blu179.mail.live.com , blu180.afx.ms , blu180.mail.live.com , blu181.afx.ms , blu181.mail.live.com , blu182.afx.ms , blu182.mail.live.com , blu183.afx.ms , blu183.mail.live.com , blu184.afx.ms , blu184.mail.live.com , blu185.afx.ms , blu185.mail.live.com , blu186.afx.ms , blu186.mail.live.com , blu187.afx.ms , blu187.mail.live.com , blu188.afx.ms , blu188.mail.live.com  

(Error code: ssl_error_bad_cert_domain)

 

 

Is there a way to rid of this, or am I stuck? Thanks!



BC AdBot (Login to Remove)

 


#2 sikntired

sikntired

  • Members
  • 1,002 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:02:30 PM

Posted 30 July 2013 - 11:33 AM

This might be of interest: http://www.ehow.com/how_8470294_disable-connection-untrusted-firefox.html



#3 jayunch

jayunch
  • Topic Starter

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Local time:01:30 PM

Posted 30 July 2013 - 04:03 PM

I did as followed and instead it gives me a

404 - Not Found

or gives a completely white, blank screen. This also occurs when I do the "add exception" part.



#4 sikntired

sikntired

  • Members
  • 1,002 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:02:30 PM

Posted 30 July 2013 - 05:12 PM

Create a new profile as a test to check if your current profile is causing the problems.

See "Creating a profile":

If the new profile works then you can transfer some files from an existing profile to the new profile, but be careful not to copy corrupted files.

Regards............



#5 x64

x64

  • Members
  • 352 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:London UK
  • Local time:08:30 PM

Posted 01 August 2013 - 02:03 PM

This actually sounds very fishy to me...

 

It could be that you really are being redirected to a server which is not the real tumblr web server, and because of that the certificate being presented to your browser really is not to be trusted.... ie a Phishing site (I didn't mean any pun with the use of "Fishy" above - honest!...)

 

Drill down into the properties of the certificate that you are being presented with. To do this you (rather disconcertingly) need to say thet you understand the risks, Click the "Add Exception" button, then click the "View Button". Whatever you do, do NOT click the "Confirm Security Exception" button.

 

When I view the real certificate on www.tumblr.com I see

Issued to www.tumblr.com; Issued by "GeoTrust SSL CA" ; Serial number 02:41:71; Expires 23/5/2015

SHA1 Fingerprint:11:60:AB:CA:73:8D:56:C8:7E:06:C0:81:A1:E7:29:FD:5F:C3:8B:46

 

If you see otherwise post back here with an image of the certificate properties dialog pages, or if you concur to me that you really are being directed to a malicious or Phishing site, go straight to the "Am I Infected" board.

 

x64



#6 sikntired

sikntired

  • Members
  • 1,002 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:02:30 PM

Posted 01 August 2013 - 05:25 PM

@64

 

Thanks for input as it is better to be safe than sorry. That's why I went to this source:

 

http://www.networking4all.com/en/support/tools/site+check/report/?fqdn=www.tumblr.com&protocol=https

 

 

Befor offering previous suggestions.


Edited by sikntired, 01 August 2013 - 05:28 PM.


#7 jhayz

jhayz

  • BC Advisor
  • 6,922 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:30 AM

Posted 02 August 2013 - 12:24 AM

See also FF link just in case https://support.mozilla.org/en-US/kb/connection-untrusted-error-message


Tekken
 


#8 x64

x64

  • Members
  • 352 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:London UK
  • Local time:08:30 PM

Posted 02 August 2013 - 12:53 AM

@64

 

Thanks for input as it is better to be safe than sorry. That's why I went to this source:

 

http://www.networking4all.com/en/support/tools/site+check/report/?fqdn=www.tumblr.com&protocol=https

 

 

Befor offering previous suggestions.

That link checks the real servers' certificate.

 

My concerns are that jayunch has contracted some kind of malware which is causing his PC to contact a server which does not the real server.

 

The SSL protocol does two important things. We all know that it encrypts traffic between our browser and the web server (so that it can not be intercepted in transit), but it also proves that you are talking to a server which is actually run by the organisation that you think you are talking to (rather than an imposter server).  It is that latter check which is failing.

 

x64






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users