9.50 win - https -The server attempted to apply security measures, but failed.

Carsten Krueger

unread,

Jun 12, 2008, 6:04:48 AM6/12/08

to

Hello,

I've a problem if I connect to https sites of my university the status is
grey.
If I click on it I get:
The server attempted to apply security measures, but failed.

With Opera 9.27 (before upgrade) the site was yellow (everything ok).

What does the message mean?
How can I get a more verbose message? What measures failed?

greetings
Carsten
--
ID = 0x2BFBF5D8 FP = 53CA 1609 B00A D2DB A066 314C 6493 69AB 2BFB F5D8
http://www.realname-diskussion.info - Realnames sind keine Pflicht
http://www.spamgourmet.com/ + http://www.temporaryinbox.com/ - Antispam
cakruege (at) gmail (dot) com | http://www.geocities.com/mungfaq/

Tim Altman

unread,

Jun 12, 2008, 7:52:08 AM6/12/08

to

On Thu, 12 Jun 2008 12:04:48 +0200, Carsten Krueger
<cakr...@invalid.invalid> wrote:

>Hello,
>
>I've a problem if I connect to https sites of my university the status is
>grey.
>If I click on it I get:
>The server attempted to apply security measures, but failed.
>
>With Opera 9.27 (before upgrade) the site was yellow (everything ok).
>
>What does the message mean?

It usually means that an HTTPS page includes HTTP elements, which
compromise the security of the page.

--
Tim Altman
Desktop QA
Opera Software
Remove NO SPAM from e-mail address to reply

Carsten Krueger

unread,

Jun 12, 2008, 9:51:12 AM6/12/08

to

Am Thu, 12 Jun 2008 07:52:08 -0400 schrieb Tim Altman:

> It usually means that an HTTPS page includes HTTP elements, which
> compromise the security of the page.

No.

Example page:
https://goya3.informatik.hu-berlin.de/

you have to import
Zertifikat DFN-PKI-Classic
and
Zertifikat HU-CA 4
from this website
http://www.cms.hu-berlin.de/dl/zertifizierung#Wurzelzertifikate
to get a complete certificate chain.

Tim Altman

unread,

Jun 12, 2008, 11:47:06 AM6/12/08

to

On Thu, 12 Jun 2008 15:51:12 +0200, Carsten Krueger
<cakr...@invalid.invalid> wrote:

>Am Thu, 12 Jun 2008 07:52:08 -0400 schrieb Tim Altman:
>
>> It usually means that an HTTPS page includes HTTP elements, which
>> compromise the security of the page.
>
>No.
>
>Example page:
>https://goya3.informatik.hu-berlin.de/
>
>you have to import
>Zertifikat DFN-PKI-Classic
>and
>Zertifikat HU-CA 4
>from this website
>http://www.cms.hu-berlin.de/dl/zertifizierung#Wurzelzertifikate
>to get a complete certificate chain.

Interesting. I can reproduce the problem, but I don't know the cause.
Hopefully Yngve, our certificates implementor, will be by to have a
look soon.

Carsten Krueger

unread,

Jun 12, 2008, 12:09:02 PM6/12/08

to

Am Thu, 12 Jun 2008 11:47:06 -0400 schrieb Tim Altman:

> Hopefully Yngve, our certificates implementor, will be by to have a
> look soon.

This would be good, I think it is a bug in opera 9.50.

Carsten Krueger

unread,

Jun 17, 2008, 9:06:25 AM6/17/08

to

Am Thu, 12 Jun 2008 11:47:06 -0400 schrieb Tim Altman:

> Interesting. I can reproduce the problem, but I don't know the cause.
> Hopefully Yngve, our certificates implementor, will be by to have a
> look soon.

Any news on this?

Tim Altman

unread,

Jun 19, 2008, 5:58:54 PM6/19/08

to

On Tue, 17 Jun 2008 15:06:25 +0200, Carsten Krueger
<cakr...@invalid.invalid> wrote:

>Am Thu, 12 Jun 2008 11:47:06 -0400 schrieb Tim Altman:
>
>> Interesting. I can reproduce the problem, but I don't know the cause.
>> Hopefully Yngve, our certificates implementor, will be by to have a
>> look soon.
>
>Any news on this?

You can try sending him a message via http://my.opera.com/yngve/.

Carsten Krueger

unread,

Jun 20, 2008, 8:08:34 PM6/20/08

to

Am Thu, 19 Jun 2008 17:58:54 -0400 schrieb Tim Altman:

> You can try sending him a message via http://my.opera.com/yngve/.

He replied.

The university server didn't send the intermediate certificate HU-CA 4 and
opera only checks recovation if it is send via server (not if it's
imported).