On 23 December 2013 14:05, sebb <seb...@gmail.com> wrote: > On 18 December 2013 14:39, Donald Whytock <dwhyt...@apache.org> wrote: >> On Tue, Dec 17, 2013 at 10:24 PM, grumpy <rp...@q.com> wrote: >> >>> >>> From this page: >>> http://www.openoffice.org/download/common/java.html >>> >>> taking the link "Installation FAQ" which goes here: >>> http://wiki.services.openoffice.org/wiki/Documentation/FAQ/Installation >>> >>> results in this message: >>> >>> There is a problem with this website's security certificate. >>> >>> The security certificate presented by this website was issued for a >>> different website's address. >>> >> >> Confirmed in IE8. Though I don't get it in Chrome. >> > > Confirm with IE, which reports a certificate for *.apache.org (Thawte) > > Does not happen in Firefox for me either, though I do get a shield > icon [1] indicating that there is some http: reference that needs to > be changed to https: > [IE also reports the same issue, if one ignores the cert. error] > > Firefox reports a different certificate, *.openoffice.org (Digicert) > > Looks like the server is serving up the wrong cert for IE. > > Opera does not complain.
Have found out that Opera downgrades the site to insecure, but this is not very obvious. This appears to be because of the insecure (http:) content. It looks like Firefox suppresses the insecure content (with an option to allow it) and treats the page as secure. However Opera allows the insecure content, but treats the resulting page as insecure. Not easy to spot. The solution in both cases should be simple - fix the insecure parts of the page. Note: this does not mean all links, only ones that are part of the page, e.g. script src="http://"; Of course this won't fix the IE certificate issue, but once that is fixed, IE will complain about the insecure content... > [1] > https://support.mozilla.org/en-US/kb/how-does-content-isnt-secure-affect-my-safety?as=u&utm_source=inproduct --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org For additional commands, e-mail: dev-h...@openoffice.apache.org
