Invalid Security Certificate

Bad2theBone · #1 15th June 2010, 10:55 PM

Got F13 installed yesterday, this afternoon I suddenly started getting Secure Connection Failed warnings. I'm not sure whose problem it is because it mentions

www.google.com:443 uses an invalid security certificate.

This certificate is only valid for *.opendns.com

(Error Code: ssl_error_bad_cert_domain)

It continues to say that someone could be impersonating the actual server. I am still receiving mail through google and my google calendars seem to be working. I do use OpenDNS for my DNS instead of my ISPs (Comcast which would very often slow down) and obviously I use IMAP mail with google on Thunderbird. So is it google, or OpenDNS, or Thunderbird that has a problem. Firefox does not seem to have a problem. I can resend as attachments jpgs of the alerts if that'll help...

brunson · #2 15th June 2010, 11:08 PM

I don't get that.

I would check the cert and make sure it's issued by a valid CA. When I connect I get a cert signed by Thawte:

Issuer:
CN = Thawte SGC CA
O = Thawte Consulting (Pty) Ltd.
C = ZA

Edit: If you're in the states, make sure the IP addresses returned from your DNS servers for google start with 74.125.

Bad2theBone · #3 16th June 2010, 02:05 PM

It seems intermittent, so far today it hasn't happened. It had just started doing it around 14:00 EDT and was getting this error while retrieving mail from google. The warning allows me to view the certificate and it shows:

Issued To
Common Name (CN) *.opendns.com
Organization (O) *.opendns.com
Organizational Unit (OU) GT55236522
Serial Number 09:22

6

Issued By
Common Name (CN) Equifax Secure Global eBusiness CA-1
Organization (O) Equifax Secure Global eBusiness CA-1
Organizational Unit (OU) <Not Part Of Certificate>

To me it seems that something or someone was impersonating google using OpenDNS cert. But I'm always logged into my google account in Firefox with no problem and I am receiving my mail from there on Thunderbird as well as all my google calendar info. So I'm not sure who to go to to resolve this. Do I approach OpenDNS or Google.com or is it a bug in Thunderbird?