# Wiki's SSL certificate is revoked

- Thread: https://externals.io/message/73706
- Original archive: https://news-web.php.net/php.internals/73706
- Started by timwolla@bastelstu.be on 2014-04-15T17:41:57+00:00
- Messages: 5
- Reply by email to internals@lists.php.net
- More for agents: search with https://externals.io/search.md?q={query} · JSON API at https://externals.io/api · documentation at https://externals.io/llms.txt

---

## #73706 — timwolla@bastelstu.be — 2014-04-15T17:41:57+00:00

URL: https://externals.io/message/73706#73706

I just wanted to check out the Travis CI RFC and noticed that the SSL
cert of the Wiki was revoked, but not replaced. My Firefox shows me

sec_error_revoked_certificate

and denies connection. Please forward this to the correct recipients if
I am wrong here, I am usually only reading here. Thanks!

Tim

---

## #73707 — Simon Schick — 2014-04-16T06:32:38+00:00

URL: https://externals.io/message/73706#73707 · In reply to: #73706

Hi, Tim

Had the same problem in Firefox.
Don't know what let's it work in Chrome ...

Bye,
Simon


On Tue, Apr 15, 2014 at 7:41 PM, Tim Düsterhus <timwolla@bastelstu.be>wrote:

> I just wanted to check out the Travis CI RFC and noticed that the SSL
> cert of the Wiki was revoked, but not replaced. My Firefox shows me
>
> sec_error_revoked_certificate
>
> and denies connection. Please forward this to the correct recipients if
> I am wrong here, I am usually only reading here. Thanks!
>
> Tim

---

## #73708 — Ferenc Kovacs — 2014-04-16T06:44:13+00:00

URL: https://externals.io/message/73706#73708 · In reply to: #73706

On Tue, Apr 15, 2014 at 7:41 PM, Tim Düsterhus <timwolla@bastelstu.be>wrote:

> I just wanted to check out the Travis CI RFC and noticed that the SSL
> cert of the Wiki was revoked, but not replaced. My Firefox shows me
>
> sec_error_revoked_certificate
>
> and denies connection. Please forward this to the correct recipients if
> I am wrong here, I am usually only reading here. Thanks!
>
> Tim
>
> --
> 
> 
>
>
Hi,

thanks for the report, we are aware of the problem, trying to solve it, but
only a handful of people have access to this box, so replacing the cert
takes a bit longer.

-- 
Ferenc Kovács
@Tyr43l - http://tyrael.hu

---

## #73709 — Jordi Boggiano — 2014-04-16T06:49:07+00:00

URL: https://externals.io/message/73706#73709 · In reply to: #73707

> Had the same problem in Firefox.
> Don't know what let's it work in Chrome ...

Works in chrome because chrome does not check for revocations since 
google puts performance above everything.

https://scotthelme.co.uk/certificate-revocation-google-chrome/

Cheers

-- 
Jordi Boggiano
@seldaek - http://nelm.io/jordi

---

## #73710 — Ferenc Kovacs — 2014-04-16T06:56:18+00:00

URL: https://externals.io/message/73706#73710 · In reply to: #73709

> 
>
> > […]
>
> Works in chrome because chrome does not check for revocations since google
> puts performance above everything.
>
> https://scotthelme.co.uk/certificate-revocation-google-chrome/
>
> Cheers
>
>
I'm using chrom on my MBP running Mavericks and chrome indeed prevents me
from connection to https://wiki.php.net

Cannot connect to the real wiki.php.net

Something is currently interfering with your secure connection to
wiki.php.net.

*Try to reload this page in a few minutes or after switching to a new
network.* If you have recently connected to a new Wi-Fi network, finish
logging in before reloading.

If you were to visit wiki.php.net right now, you might share private
information with an attacker. To protect your privacy, Chrome will not load
the page until it can establish a secure connection to the real wiki.php.net
.

LessReload
What does this mean?

wiki.php.net normally uses encryption (SSL) to protect your information.
When Chrome tried to connect to wiki.php.net this time,
wiki.php.netreturned unusual and incorrect credentials. Either an
attacker is trying to
pretend to be wiki.php.net, or a Wi-Fi sign-in screen has interrupted the
connection. Your information is still secure because Chrome stopped the
connection before any data was exchanged.

Network errors and attacks are usually temporary, so this page will
probably work later. You can also try switching to another network.

Technical details

The certificate that Chrome received during this connection attempt has
been revoked.
Error type: Key revocation
Subject: *.php.net
Issuer: PositiveSSL CA 2
Public key hashes: sha1/dxOu3njGiHauzOvk24uYMLjpGPo=
sha256/3paRUWXiEmBlOilnpb1iFhkASFgfFgtW0OUHuYGzFPk=
sha1/LxZvcCnq1Hw/Gv8nXw5ugW6un6o=
sha256/633lt352PKRXbOwf4xSEa1M517scpD3l5f79xMD9r9Q=
sha1/T5x9IXmcrQ7YuQxXnxoCmeeQ84c=
sha256/lCppFqbkrlJ3EcVFAkeip0+44VaoJUymbnOaEUk7tEU=

-- 
Ferenc Kovács
@Tyr43l - http://tyrael.hu