CAcert System Admins discussion list

[Guillaume ROMAGNY <guillaume AT cacert.org>]

-------- Original Message --------

Subject:	Re: AW: https://cats.cacert.org/: The Webpage cannot be displayed
Date:	Thu, 12 Apr 2012 14:49:55 +0200
From:	Guillaume ROMAGNY <guillaume AT cacert.org>
To:	thomas.schittli AT post.ch
CC:	guillaume AT cacert.org

Hello Thomas,

I don't have the link but it looks like a bug with SSL/TLS negociation. I probably have changed my Firefox configuration to bypass the issue (option 1).

(option 2) Maybe (or not) CATS webserver needs to be configured OR maybe there is no fix on the webserver for this currently. I will ask CAcert system admin team for a piece of advise.

Have a nice day,

Best regards,

Guillaume

On 11/04/2012 15:17, thomas.schittli AT post.ch wrote:

Hello Guillaume

 

Thank you very much for your fast answer!, yes, we have installed the Client Certificate, too.

 

It’s a very strange problem, because we have about 1200 employees and they are daily using https websites – without any problems.

 

It’s also very strange because we have no problem to login to cacert.org and then we can browse everything using https (e.g.: https://www.cacert.org/wot.php?id=2) - but https://cats.cacert.org/ is not working…

 

 

I was able to get an error message from Firefox:

 

Secure Connection Failed

An error occurred during a connection to cats.cacert.org.

SSL peer was unable to negotiate an acceptable set of security parameters.

(Error code: ssl_error_handshake_failure_alert)

 

IE just says that the web page cannot be displayed.

 

 

Kind regards,

Thomas

 

 

 

Von: Guillaume ROMAGNY [mailto:guillaume AT cacert.org]
Gesendet: Mittwoch, 11. April 2012 14:28
An: cacert-education AT lists.cacert.org
Cc: Schittli Thomas, IT133 extern
Betreff: Re: https://cats.cacert.org/: The Webpage cannot be displayed

 

Hello Thomas,

On 11/04/2012 13:28, thomas.schittli AT post.ch wrote:

Hello

 

It’s very strange, but it looks like https://cats.cacert.org/ does not exist: neither IE nor Firefox can display this site – and we have added the root certificate.

 

Kind regards,

Thomas

 

Die Schweizerische Post
Informationstechnologie
Webergutstrasse 12
3030 Bern (Zollikofen)

Telefon: 058 338 02 97
E-Mail: thomas.schittli AT post.ch

 

It looks like CATS is working. Do you have a valid CAcert client cert ?

I am using Firefox Nightly on Win7. I have the CAcert roots and a valid CAcert client certificate.

Best regards,

Guillaume

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature