Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

How to bypass connection untrusted block?

3,155 views
Skip to first unread message

Lu Wei

unread,
Oct 25, 2012, 9:18:08 AM10/25/12
to
There used to be an "add exception" button, but now there's only "get me out of here" displayed. The error page:
/*
This Connection is Untrusted
You have asked Firefox to connect securely to twitter.com, but we can't confirm that your connection is secure.
Normally, when you try to connect securely, sites will present trusted identification to prove that you are going to the right place. However, this site's identity can't be verified.

What Should I Do?

If you usually connect to this site without problems, this error could mean that someone is trying to impersonate the site, and you shouldn't continue.

twitter.com uses an invalid security certificate.
The certificate is not trusted because no issuer chain was provided.
(Error code: sec_error_unknown_issuer)
*/

But I know the connection should be OK because I am visiting twitter through GoAgent, a proxy based on Google app engine, which is known to have issue with HTTPS. How do I skip that error page?

--
Regards,
Lu Wei
PGP key ID: 0x92CCE1EA

Redhat71

unread,
Oct 25, 2012, 11:55:25 AM10/25/12
to

Lu Wei

unread,
Oct 25, 2012, 8:24:36 PM10/25/12
to
On 2012-10-25 23:55, Redhat71 wrote:
>
> iirc, http://kb.mozillazine.org/Browser.xul.error_pages.expert_bad_cert
>

Thanks. That brings "add exception" back, but I still cannot get through
error page after I add exception. It just stay there regardless
refreshing page. I check in "certificate manager", and under "servers"
tab there is the exception item, but "edit trust" button is greyed out.
I wonder whether it is the cause. I export the certificate as follows:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Redhat71

unread,
Oct 25, 2012, 11:58:30 PM10/25/12
to
don't know anything about cert

btw, have you tried any other browser, with the same proxy? i.e. is it a
firefox only problem or a https proxy problem?

Lu Wei

unread,
Oct 26, 2012, 9:23:31 AM10/26/12
to
On 2012-10-26 11:58, Redhat71 wrote:

> don't know anything about cert
>
> btw, have you tried any other browser, with the same proxy? i.e. is it a
> firefox only problem or a https proxy problem?

You reminded me of IE, yes, IE is fine. And this time Firefox managed to get through that error page too -- but only with one page of text, lost all image and format and cannot refresh or go to next page. I see from GoAgent's window a lot of error message:

---------------------------------error log of Firfox starts--------------------------------------------------
INFO - [Oct 26 21:14:37] resolve common.GOOGLE_HOSTS domian=('www.google.com', '
www.l.google.com', 'mail.l.google.com', 'mail.google.com', 'maps.l.google.com')
to iplist
INFO - [Oct 26 21:14:37] resolve common.GOOGLE_HOSTS domian to iplist=('74.125.1
35.83', '74.125.128.101', '74.125.128.100', '74.125.128.103', '74.125.128.102',
'74.125.128.83', '74.125.128.104', '74.125.128.106', '74.125.235.85', '74.125.23
5.86', '72.14.203.18', '72.14.203.19', '72.14.203.17', '74.125.235.22', '74.125.
235.21', '74.125.128.138', '74.125.128.139', '74.125.135.18', '74.125.135.19', '
74.125.135.17', '74.125.128.113', '74.125.128.99', '74.125.128.105', '74.125.128
.18', '74.125.128.19', '72.14.203.83', '74.125.235.213', '74.125.235.214', '74.1
25.128.147', '74.125.128.17')
INFO - [Oct 26 21:14:37] 127.0.0.1:2945 "CONNECT si0.twimg.com:443 HTTP/1.1" - -

INFO - [Oct 26 21:14:38] 127.0.0.1:2947 "CONNECT si0.twimg.com:443 HTTP/1.1" - -

INFO - [Oct 26 21:14:38] 127.0.0.1:2946 "CONNECT si0.twimg.com:443 HTTP/1.1" - -

INFO - [Oct 26 21:14:38] 127.0.0.1:2948 "CONNECT si0.twimg.com:443 HTTP/1.1" - -

Traceback (most recent call last):
File "gevent\greenlet.pyo", line 328, in run
File "C:\green\proxy\goagent\local\proxy.py", line 959, in gaeproxy_handler
File "C:\green\proxy\goagent\local\proxy.py", line 419, in parse_request
File "socket.pyo", line 476, in readline
File "gevent\ssl.pyo", line 244, in recv
File "gevent\ssl.pyo", line 110, in read
SSLError: [Errno 1] _ssl.c:1359: error:14094418:SSL routines:SSL3_READ_BYTES:tls
v1 alert unknown ca
<Greenlet at 0x1349f30: gaeproxy_handler(<socket at 0x112cc90 fileno=600 sock=12
7.0.0.1:808, ('127.0.0.1', 2948))> failed with SSLError

INFO - [Oct 26 21:14:38] 127.0.0.1:2949 "CONNECT si0.twimg.com:443 HTTP/1.1" - -

Traceback (most recent call last):
File "gevent\greenlet.pyo", line 328, in run
File "C:\green\proxy\goagent\local\proxy.py", line 959, in gaeproxy_handler
File "C:\green\proxy\goagent\local\proxy.py", line 419, in parse_request
File "socket.pyo", line 476, in readline
File "gevent\ssl.pyo", line 244, in recv
File "gevent\ssl.pyo", line 110, in read
SSLError: [Errno 1] _ssl.c:1359: error:14094418:SSL routines:SSL3_READ_BYTES:tls
v1 alert unknown ca
<Greenlet at 0x1349f30: gaeproxy_handler(<socket at 0x112cd70 fileno=600 sock=12
7.0.0.1:808, ('127.0.0.1', 2949))> failed with SSLError

INFO - [Oct 26 21:14:38] 127.0.0.1:2950 "CONNECT si0.twimg.com:443 HTTP/1.1" - -

INFO - [Oct 26 21:14:38] 127.0.0.1:2951 "CONNECT si0.twimg.com:443 HTTP/1.1" - -

INFO - [Oct 26 21:14:38] 127.0.0.1:2952 "CONNECT si0.twimg.com:443 HTTP/1.1" - -

INFO - [Oct 26 21:14:38] 127.0.0.1:2956 "CONNECT si0.twimg.com:443 HTTP/1.1" - -

INFO - [Oct 26 21:14:38] 127.0.0.1:2955 "CONNECT si0.twimg.com:443 HTTP/1.1" - -

INFO - [Oct 26 21:14:38] 127.0.0.1:2954 "CONNECT si0.twimg.com:443 HTTP/1.1" - -

INFO - [Oct 26 21:14:38] 127.0.0.1:2953 "CONNECT si0.twimg.com:443 HTTP/1.1" - -

INFO - [Oct 26 21:14:38] 127.0.0.1:2957 "CONNECT si0.twimg.com:443 HTTP/1.1" - -

INFO - [Oct 26 21:14:38] 127.0.0.1:2959 "CONNECT si0.twimg.com:443 HTTP/1.1" - -

INFO - [Oct 26 21:14:38] 127.0.0.1:2958 "CONNECT si0.twimg.com:443 HTTP/1.1" - -

Traceback (most recent call last):
File "gevent\greenlet.pyo", line 328, in run
File "C:\green\proxy\goagent\local\proxy.py", line 959, in gaeproxy_handler
File "C:\green\proxy\goagent\local\proxy.py", line 419, in parse_request
File "socket.pyo", line 476, in readline
File "gevent\ssl.pyo", line 244, in recv
File "gevent\ssl.pyo", line 110, in read
SSLError: [Errno 1] _ssl.c:1359: error:14094418:SSL routines:SSL3_READ_BYTES:tls
v1 alert unknown ca
<Greenlet at 0x1349ee0: gaeproxy_handler(<socket at 0x112cc90 fileno=508 sock=12
7.0.0.1:808, ('127.0.0.1', 2951))> failed with SSLError

Traceback (most recent call last):
File "gevent\greenlet.pyo", line 328, in run
File "C:\green\proxy\goagent\local\proxy.py", line 959, in gaeproxy_handler
File "C:\green\proxy\goagent\local\proxy.py", line 419, in parse_request
File "socket.pyo", line 476, in readline
File "gevent\ssl.pyo", line 244, in recv
File "gevent\ssl.pyo", line 110, in read
SSLError: [Errno 1] _ssl.c:1359: error:14094418:SSL routines:SSL3_READ_BYTES:tls
v1 alert unknown ca
<Greenlet at 0x1349f80: gaeproxy_handler(<socket at 0x112cdd0 fileno=600 sock=12
7.0.0.1:808, ('127.0.0.1', 2952))> failed with SSLError

Traceback (most recent call last):
File "gevent\greenlet.pyo", line 328, in run
File "C:\green\proxy\goagent\local\proxy.py", line 959, in gaeproxy_handler
File "C:\green\proxy\goagent\local\proxy.py", line 419, in parse_request
File "socket.pyo", line 476, in readline
File "gevent\ssl.pyo", line 244, in recv
File "gevent\ssl.pyo", line 110, in read
SSLError: [Errno 1] _ssl.c:1359: error:14094418:SSL routines:SSL3_READ_BYTES:tls
v1 alert unknown ca
<Greenlet at 0x1349e90: gaeproxy_handler(<socket at 0x112cbb0 fileno=616 sock=12
7.0.0.1:808, ('127.0.0.1', 2954))> failed with SSLError

Traceback (most recent call last):
File "gevent\greenlet.pyo", line 328, in run
File "C:\green\proxy\goagent\local\proxy.py", line 959, in gaeproxy_handler
File "C:\green\proxy\goagent\local\proxy.py", line 419, in parse_request
File "socket.pyo", line 476, in readline
File "gevent\ssl.pyo", line 244, in recv
File "gevent\ssl.pyo", line 110, in read
error: [Errno 10054]
<Greenlet at 0x1135080: gaeproxy_handler(<socket at 0x112cfd0 fileno=640 sock=12
7.0.0.1:808, ('127.0.0.1', 2956))> failed with error

Traceback (most recent call last):
File "gevent\greenlet.pyo", line 328, in run
File "C:\green\proxy\goagent\local\proxy.py", line 959, in gaeproxy_handler
File "C:\green\proxy\goagent\local\proxy.py", line 419, in parse_request
File "socket.pyo", line 476, in readline
File "gevent\ssl.pyo", line 244, in recv
File "gevent\ssl.pyo", line 110, in read
error: [Errno 10054]
<Greenlet at 0x1135030: gaeproxy_handler(<socket at 0x112cc50 fileno=628 sock=12
7.0.0.1:808, ('127.0.0.1', 2955))> failed with error

Traceback (most recent call last):
File "gevent\greenlet.pyo", line 328, in run
File "C:\green\proxy\goagent\local\proxy.py", line 959, in gaeproxy_handler
File "C:\green\proxy\goagent\local\proxy.py", line 419, in parse_request
File "socket.pyo", line 476, in readline
File "gevent\ssl.pyo", line 244, in recv
File "gevent\ssl.pyo", line 110, in read
SSLError: [Errno 1] _ssl.c:1359: error:14094418:SSL routines:SSL3_READ_BYTES:tls
v1 alert unknown ca
<Greenlet at 0x1135170: gaeproxy_handler(<socket at 0x1136a30 fileno=664 sock=12
7.0.0.1:808, ('127.0.0.1', 2958))> failed with SSLError

Traceback (most recent call last):
File "gevent\greenlet.pyo", line 328, in run
File "C:\green\proxy\goagent\local\proxy.py", line 959, in gaeproxy_handler
File "C:\green\proxy\goagent\local\proxy.py", line 419, in parse_request
File "socket.pyo", line 476, in readline
File "gevent\ssl.pyo", line 244, in recv
File "gevent\ssl.pyo", line 110, in read
SSLError: [Errno 1] _ssl.c:1359: error:14094418:SSL routines:SSL3_READ_BYTES:tls
v1 alert unknown ca
<Greenlet at 0x11350d0: gaeproxy_handler(<socket at 0x112cff0 fileno=652 sock=12
7.0.0.1:808, ('127.0.0.1', 2957))> failed with SSLError

INFO - [Oct 26 21:14:38] 127.0.0.1:2960 "CONNECT si0.twimg.com:443 HTTP/1.1" - -

Traceback (most recent call last):
File "gevent\greenlet.pyo", line 328, in run
File "C:\green\proxy\goagent\local\proxy.py", line 959, in gaeproxy_handler
File "C:\green\proxy\goagent\local\proxy.py", line 419, in parse_request
File "socket.pyo", line 476, in readline
File "gevent\ssl.pyo", line 244, in recv
File "gevent\ssl.pyo", line 110, in read
SSLError: [Errno 1] _ssl.c:1359: error:14094418:SSL routines:SSL3_READ_BYTES:tls
v1 alert unknown ca
<Greenlet at 0x1349f30: gaeproxy_handler(<socket at 0x112ce50 fileno=652 sock=12
7.0.0.1:808, ('127.0.0.1', 2960))> failed with SSLError
-----------------------------------error log of Firefox ends-------------------------------------------

And IE 's fine with the log:
-----------------------------------success log of IE starts---------------------------------------------
INFO - [Oct 26 21:17:48] resolve common.GOOGLE_HOSTS domian=('www.google.com', '
www.l.google.com', 'mail.l.google.com', 'mail.google.com', 'maps.l.google.com')
to iplist
INFO - [Oct 26 21:17:49] resolve common.GOOGLE_HOSTS domian to iplist=('173.194.
32.21', '74.125.134.83', '173.194.32.22', '74.125.65.19', '74.125.65.18', '74.12
5.65.17', '74.125.128.101', '74.125.128.100', '74.125.128.103', '74.125.128.102'
, '74.125.128.105', '74.125.128.104', '74.125.128.106', '74.125.128.147', '74.12
5.130.83', '74.125.134.17', '74.125.134.18', '74.125.65.83', '173.194.32.54', '7
4.125.134.19', '173.194.32.53', '74.125.130.17', '74.125.128.138', '74.125.128.1
39', '74.125.128.83', '74.125.130.19', '74.125.130.18', '74.125.128.113', '74.12
5.128.99', '74.125.128.18', '74.125.128.19', '74.125.128.17')
INFO - [Oct 26 21:17:51] 127.0.0.1:2965 "GET http://twitter.com/ HTTP/1.1" 200 1
3851
WARNING - [Oct 26 21:17:52] http.request "GET http://www.google-analytics.com/ga
.js") return None
INFO - [Oct 26 21:18:04] 127.0.0.1:2977 "CONNECT twitter.com:443 HTTP/1.1" - -
INFO - [Oct 26 21:18:05] 127.0.0.1:2977 "GET https://twitter.com/ HTTP/1.1" 200
13897
INFO - [Oct 26 21:18:05] 127.0.0.1:2982 "CONNECT twimg0-a.akamaihd.net:443 HTTP/
1.1" - -
INFO - [Oct 26 21:18:05] 127.0.0.1:2981 "CONNECT twimg0-a.akamaihd.net:443 HTTP/
1.1" - -
INFO - [Oct 26 21:18:06] 127.0.0.1:2982 "GET https://twimg0-a.akamaihd.net/a/135
0941601/t1/css/t1_more.bundle.css HTTP/1.1" 200 27965
INFO - [Oct 26 21:18:06] 127.0.0.1:2981 "GET https://twimg0-a.akamaihd.net/a/135
0941601/t1/css/t1_core_logged_out.bundle.css HTTP/1.1" 200 29218
INFO - [Oct 26 21:18:07] 127.0.0.1:2989 "CONNECT twimg0-a.akamaihd.net:443 HTTP/
1.1" - -
INFO - [Oct 26 21:18:07] 127.0.0.1:2990 "CONNECT twimg0-a.akamaihd.net:443 HTTP/
1.1" - -
INFO - [Oct 26 21:18:07] 127.0.0.1:2991 "CONNECT si0.twimg.com:443 HTTP/1.1" - -

INFO - [Oct 26 21:18:07] 127.0.0.1:3001 "CONNECT twimg0-a.akamaihd.net:443 HTTP/
1.1" - -
INFO - [Oct 26 21:18:07] 127.0.0.1:3005 "CONNECT twimg0-a.akamaihd.net:443 HTTP/
1.1" - -
INFO - [Oct 26 21:18:07] 127.0.0.1:3006 "CONNECT twimg0-a.akamaihd.net:443 HTTP/
1.1" - -
INFO - [Oct 26 21:18:07] 127.0.0.1:2990 "GET https://twimg0-a.akamaihd.net/a/135
0941601/t1/img/twitter_web_sprite_bgs.png HTTP/1.1" 200 6602
INFO - [Oct 26 21:18:07] 127.0.0.1:3013 "CONNECT twimg0-a.akamaihd.net:443 HTTP/
1.1" - -
INFO - [Oct 26 21:18:08] 127.0.0.1:3006 "GET https://twimg0-a.akamaihd.net/a/135
0941601/t1/img/loader.gif HTTP/1.1" 200 4178
INFO - [Oct 26 21:18:08] 127.0.0.1:3005 "GET https://twimg0-a.akamaihd.net/a/135
0941601/images/bigger_spinner.gif HTTP/1.1" 200 4178
INFO - [Oct 26 21:18:08] 127.0.0.1:3001 "GET https://twimg0-a.akamaihd.net/a/135
0941601/t1/img/twitter_web_sprite_icons.png HTTP/1.1" 200 67513
INFO - [Oct 26 21:18:08] 127.0.0.1:2989 "GET https://twimg0-a.akamaihd.net/a/135
0941601/t1/img/front_page/jp-mo...@2x.jpg HTTP/1.1" 200 32472
INFO - [Oct 26 21:18:08] 127.0.0.1:2991 "GET https://si0.twimg.com/c/swift/init.
ef644480fe2a53578f7ce4eda13396e86b6fa74a.js HTTP/1.1" 200 40411
INFO - [Oct 26 21:18:08] 127.0.0.1:3013 "GET https://twimg0-a.akamaihd.net/a/135
0941601/t1/img/temp_gallery_sprite.png HTTP/1.1" 200 3313
INFO - [Oct 26 21:18:08] 127.0.0.1:3017 "CONNECT si0.twimg.com:443 HTTP/1.1" - -

INFO - [Oct 26 21:18:08] 127.0.0.1:3021 "CONNECT si0.twimg.com:443 HTTP/1.1" - -

INFO - [Oct 26 21:18:08] 127.0.0.1:3025 "CONNECT twitter.com:443 HTTP/1.1" - -
INFO - [Oct 26 21:18:09] 127.0.0.1:3021 "GET https://si0.twimg.com/favicons/favi
con.ico HTTP/1.1" 200 1150
INFO - [Oct 26 21:18:09] 127.0.0.1:3017 "GET https://si0.twimg.com/c/swift/zh-cn
/bundle/core.391b91000210a4926fac58d45a30297e407dc43d.js HTTP/1.1" 200 29177
INFO - [Oct 26 21:18:09] 127.0.0.1:3029 "CONNECT si0.twimg.com:443 HTTP/1.1" - -

INFO - [Oct 26 21:18:09] 127.0.0.1:3025 "GET https://twitter.com/opensearch.xml
HTTP/1.1" 200 309
INFO - [Oct 26 21:18:11] 127.0.0.1:3029 "GET https://si0.twimg.com/c/swift/zh-cn
/bundle/frontpage.c8cc2c006cda79005f97ae9840974dce892a76e6.js HTTP/1.1" 200 7557

INFO - [Oct 26 21:18:12] 127.0.0.1:3033 "CONNECT ssl.google-analytics.com:443 HT
TP/1.1" - -
-----------------------------------success log of IE ends-----------------------------------------------------------
0 new messages