Hi.

On Mon, Dec 09, 2019 at 04:05:00PM +1100, Keith Bainbridge wrote:
> On 4/12/19 11:11 am, John Hasler wrote:
> > Yes.  I suggest Newsguy o
> 
> 
> Ummmmm
> 
> Firefox gave me this when I went to their web page
> 
> Warning: Potential Security Risk Ahead

Firefox messages are useless for troubleshooting.


> Should I be worried???

$ openssl s_client -connect member.newsguy.com:443 -showcerts
...
 3 s:C = SE, O = AddTrust AB, OU = AddTrust External TTP Network, CN = AddTrust 
External CA Root
   i:C = SE, O = AddTrust AB, OU = AddTrust External TTP Network, CN = AddTrust 
External CA Root
...
    Verify return code: 21 (unable to verify the first certificate)


Your Firefox certificate store (which does not have anything in common
with ca-certificate package) lacks this CA certificate.

File a bug against firefox-esr, or something. CA certificate seems
legit.


> Or am I also cynical?

Nah, that's just TLS.

Reco

Reply via email to