SSL problem with FireFox only

Rado Velitchkov

unread,

Feb 6, 2017, 7:00:22 AM2/6/17

to BigBlueButton-Setup

Guys,

Please help with this - I am getting a complete showstopper with firefox (the only way to do desktop sharing). It says my SSL certificate has been revoked and won't load the BBB server :( Tried in Chrome, Edge, and Opera - no issue whatsoever there. This SSL server test reports no problems either. FF is latest version as it was just installed.

This is the URL in question - https://agora.klassonline.com Could the issue somehow be related to the fact that the main domain (klassonline.com) has a different SSL cert than the subdomain?

Many thanks in advance for any tips and suggestions!

Fred Dixon

unread,

Feb 6, 2017, 8:15:53 AM2/6/17

to bigbluebu...@googlegroups.com

Hi Rado,

It's definitely a problem with your certificate. If I connect with FireFox I get the message

An error occurred during a connection to agora.klassonline.com. Peer’s Certificate has been revoked. Error code: SEC_ERROR_REVOKED_CERTIFICATE

The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.

Please contact the website owners to inform them of this problem.

Recommending replacing the certificate on agora.klassonline.com with a new one and then check it with

https://www.ssllabs.com/ssltest/

which will give you a rating on your certificate.

Regards,.. Fred

--
You received this message because you are subscribed to the Google Groups "BigBlueButton-Setup" group.
To unsubscribe from this group and stop receiving emails from it, send an email to bigbluebutton-setup+unsub...@googlegroups.com.
To post to this group, send email to bigbluebutton-setup@googlegroups.com.
Visit this group at https://groups.google.com/group/bigbluebutton-setup.
For more options, visit https://groups.google.com/d/optout.

--

BigBlueButton Developer

http://bigbluebutton.org/

@bigbluebutton

Rado Velitchkov

unread,

Feb 6, 2017, 10:06:41 AM2/6/17

to BigBlueButton-Setup

Thanks, Fred, but this doesn't make any sense to me. agora.klassonline.com passes the SSL test with flying colors (solid A), there's no issues with Edge, Opera, and Chrome. It's only FF that comes up with the revoked certification message. Isn't this weird?

On Monday, February 6, 2017 at 3:15:53 PM UTC+2, Fred Dixon wrote:

Hi Rado,

It's definitely a problem with your certificate. If I connect with FireFox I get the message

An error occurred during a connection to agora.klassonline.com. Peer’s Certificate has been revoked. Error code: SEC_ERROR_REVOKED_CERTIFICATE

The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
Please contact the website owners to inform them of this problem.

Recommending replacing the certificate on agora.klassonline.com with a new one and then check it with

https://www.ssllabs.com/ssltest/

which will give you a rating on your certificate.

Regards,.. Fred

On Mon, Feb 6, 2017 at 7:00 AM, Rado Velitchkov <rveli...@gmail.com> wrote:

Guys,

Please help with this - I am getting a complete showstopper with firefox (the only way to do desktop sharing). It says my SSL certificate has been revoked and won't load the BBB server :( Tried in Chrome, Edge, and Opera - no issue whatsoever there. This SSL server test reports no problems either. FF is latest version as it was just installed.

This is the URL in question - https://agora.klassonline.com Could the issue somehow be related to the fact that the main domain (klassonline.com) has a different SSL cert than the subdomain?

Many thanks in advance for any tips and suggestions!

--
You received this message because you are subscribed to the Google Groups "BigBlueButton-Setup" group.
To unsubscribe from this group and stop receiving emails from it, send an email to bigbluebutton-setup+unsub...@googlegroups.com.

To post to this group, send email to bigbluebu...@googlegroups.com.

Visit this group at https://groups.google.com/group/bigbluebutton-setup.
For more options, visit https://groups.google.com/d/optout.

Daniel McLellan

unread,

Feb 6, 2017, 10:32:12 AM2/6/17

to bigbluebu...@googlegroups.com

May I suggest you have the cert rekeyed with the addendum of the subdomain in the CSR? SO when you create the CSR, add both "klassonline.com" and "agora.klassonline.com" and firefox shouldn't complain.

On Mon, Feb 6, 2017 at 10:06 AM, Rado Velitchkov <rveli...@gmail.com> wrote:

Thanks, Fred, but this doesn't make any sense to me. agora.klassonline.com passes the SSL test with flying colors (solid A), there's no issues with Edge, Opera, and Chrome. It's only FF that comes up with the revoked certification message. Isn't this weird?

On Monday, February 6, 2017 at 3:15:53 PM UTC+2, Fred Dixon wrote:

Hi Rado,

It's definitely a problem with your certificate. If I connect with FireFox I get the message

An error occurred during a connection to agora.klassonline.com. Peer’s Certificate has been revoked. Error code: SEC_ERROR_REVOKED_CERTIFICATE

The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
Please contact the website owners to inform them of this problem.

Recommending replacing the certificate on agora.klassonline.com with a new one and then check it with

https://www.ssllabs.com/ssltest/

which will give you a rating on your certificate.

Regards,.. Fred

On Mon, Feb 6, 2017 at 7:00 AM, Rado Velitchkov <rveli...@gmail.com> wrote:

Guys,

Please help with this - I am getting a complete showstopper with firefox (the only way to do desktop sharing). It says my SSL certificate has been revoked and won't load the BBB server :( Tried in Chrome, Edge, and Opera - no issue whatsoever there. This SSL server test reports no problems either. FF is latest version as it was just installed.

This is the URL in question - https://agora.klassonline.com Could the issue somehow be related to the fact that the main domain (klassonline.com) has a different SSL cert than the subdomain?

Many thanks in advance for any tips and suggestions!

--
You received this message because you are subscribed to the Google Groups "BigBlueButton-Setup" group.

To unsubscribe from this group and stop receiving emails from it, send an email to bigbluebutton-setup+unsubscribe...@googlegroups.com.

To post to this group, send email to bigbluebu...@googlegroups.com.
Visit this group at https://groups.google.com/group/bigbluebutton-setup.
For more options, visit https://groups.google.com/d/optout.

--
BigBlueButton Developer
http://bigbluebutton.org/
@bigbluebutton

--
You received this message because you are subscribed to the Google Groups "BigBlueButton-Setup" group.
To unsubscribe from this group and stop receiving emails from it, send an email to bigbluebutton-setup+unsub...@googlegroups.com.

To post to this group, send email to bigbluebutton-setup@googlegroups.com.

Daniel McLellan

unread,

Feb 6, 2017, 10:34:27 AM2/6/17

to bigbluebu...@googlegroups.com

Also, why didn't you use the wildcard cert on both domains?

Rado Velitchkov

unread,

Feb 6, 2017, 11:11:26 AM2/6/17

to BigBlueButton-Setup, daniel....@gmail.com

Long story short, originally I created the SSL cert to run on my BBB machine, and then the administrator of my main site decided on their own to install a fresh SSL certificate, not knowing i have one for the subdomain. Hence, the mess.....

On Monday, February 6, 2017 at 5:34:27 PM UTC+2, Daniel McLellan wrote:

Also, why didn't you use the wildcard cert on both domains?

On Mon, Feb 6, 2017 at 10:31 AM, Daniel McLellan <daniel....@gmail.com> wrote:

May I suggest you have the cert rekeyed with the addendum of the subdomain in the CSR? SO when you create the CSR, add both "klassonline.com" and "agora.klassonline.com" and firefox shouldn't complain.

On Mon, Feb 6, 2017 at 10:06 AM, Rado Velitchkov <rveli...@gmail.com> wrote:

Thanks, Fred, but this doesn't make any sense to me. agora.klassonline.com passes the SSL test with flying colors (solid A), there's no issues with Edge, Opera, and Chrome. It's only FF that comes up with the revoked certification message. Isn't this weird?

On Monday, February 6, 2017 at 3:15:53 PM UTC+2, Fred Dixon wrote:

Hi Rado,

It's definitely a problem with your certificate. If I connect with FireFox I get the message

An error occurred during a connection to agora.klassonline.com. Peer’s Certificate has been revoked. Error code: SEC_ERROR_REVOKED_CERTIFICATE

The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
Please contact the website owners to inform them of this problem.

Recommending replacing the certificate on agora.klassonline.com with a new one and then check it with

https://www.ssllabs.com/ssltest/

which will give you a rating on your certificate.

Regards,.. Fred

On Mon, Feb 6, 2017 at 7:00 AM, Rado Velitchkov <rveli...@gmail.com> wrote:

Guys,

Please help with this - I am getting a complete showstopper with firefox (the only way to do desktop sharing). It says my SSL certificate has been revoked and won't load the BBB server :( Tried in Chrome, Edge, and Opera - no issue whatsoever there. This SSL server test reports no problems either. FF is latest version as it was just installed.

This is the URL in question - https://agora.klassonline.com Could the issue somehow be related to the fact that the main domain (klassonline.com) has a different SSL cert than the subdomain?

Many thanks in advance for any tips and suggestions!

--
You received this message because you are subscribed to the Google Groups "BigBlueButton-Setup" group.

To unsubscribe from this group and stop receiving emails from it, send an email to bigbluebutton-setup+unsub...@googlegroups.com.

To post to this group, send email to bigbluebu...@googlegroups.com.
Visit this group at https://groups.google.com/group/bigbluebutton-setup.
For more options, visit https://groups.google.com/d/optout.

--
BigBlueButton Developer
http://bigbluebutton.org/
@bigbluebutton

--
You received this message because you are subscribed to the Google Groups "BigBlueButton-Setup" group.

To unsubscribe from this group and stop receiving emails from it, send an email to bigbluebutton-setup+unsub...@googlegroups.com.

Rado Velitchkov

unread,

Feb 7, 2017, 5:05:37 AM2/7/17

to BigBlueButton-Setup, daniel....@gmail.com

Seems like the real issue is:

Mozilla and Google decided to distrust all StartCom root certificates as of 21^st of October, this situation will have an impact in the upcoming release of Firefox and Chrome in January. Apple's decision announced on Nov 30^th of distrusting all StartCom root certificates as of 1st of December will have an impact in their upcoming security update.

Fred Dixon

unread,

Feb 7, 2017, 8:43:36 AM2/7/17

to bigbluebu...@googlegroups.com

Hi Rado,

That's for sharing this as it will help others. If Mozilla and Google is distrusting StartCom root certificate, strongly recommend switching certificates immediately.

Regards,... Fred

To unsubscribe from this group and stop receiving emails from it, send an email to bigbluebutton-setup+unsubscribe...@googlegroups.com.

To post to this group, send email to bigbluebu...@googlegroups.com.
Visit this group at https://groups.google.com/group/bigbluebutton-setup.
For more options, visit https://groups.google.com/d/optout.

--
BigBlueButton Developer
http://bigbluebutton.org/
@bigbluebutton

--
You received this message because you are subscribed to the Google Groups "BigBlueButton-Setup" group.

To unsubscribe from this group and stop receiving emails from it, send an email to bigbluebutton-setup+unsubscribe...@googlegroups.com.

To post to this group, send email to bigbluebu...@googlegroups.com.
Visit this group at https://groups.google.com/group/bigbluebutton-setup.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "BigBlueButton-Setup" group.

To unsubscribe from this group and stop receiving emails from it, send an email to bigbluebutton-setup+unsubscribe...@googlegroups.com.
To post to this group, send email to bigbluebutton-setup@googlegroups.com.

Visit this group at https://groups.google.com/group/bigbluebutton-setup.
For more options, visit https://groups.google.com/d/optout.

Reply all

Reply to author

Forward