Error when "https everywhere" enforce the SSL connection

Slimjet bug reports
User avatar
Sampei Nihira
Posts: 2
Joined: Mon May 23, 2016 10:34 am

Error when "https everywhere" enforce the SSL connection

Post by Sampei Nihira » Mon May 23, 2016 10:51 am

Windows XP + SlimJet ver 10.0.1.0 + HTTPS EveryWhere

Image

Image

Image

No problem with Firefox:

Image

TH.
釣りキチ三平

south450
Posts: 4
Joined: Thu May 05, 2016 4:14 pm

Re: Error when "https everywhere" enforce the SSL connection

Post by south450 » Mon May 23, 2016 1:32 pm

viewtopic.php?f=6&t=994

have the same problem.

this board is really slow in answering questions

flashpeak
Site Admin
Posts: 361
Joined: Mon Apr 21, 2014 3:57 pm

Re: Error when "https everywhere" enforce the SSL connection

Post by flashpeak » Tue May 24, 2016 12:05 am

We are aware of this issue. I think it's an overlooked bug by the Chrome team when they took off support of XP. We can't expect them to fix the problem since it only happens to XP and the guys at Google won't even care. If it's a critical issue for you, you can stay with 9.0.7 for now while we look into this issue.
Stephen Cheng
FlashPeak Inc.

flashpeak
Site Admin
Posts: 361
Joined: Mon Apr 21, 2014 3:57 pm

Re: Error when "https everywhere" enforce the SSL connection

Post by flashpeak » Mon May 30, 2016 10:45 am

The bug should have been fixed in 10.0.4.0.
Stephen Cheng
FlashPeak Inc.

heinoganda
Posts: 3
Joined: Tue May 31, 2016 12:03 pm

Re: Error when "https everywhere" enforce the SSL connection

Post by heinoganda » Tue May 31, 2016 12:39 pm

There is a problem in Slimjet Version 10.0.1.0/10.0.2.0/10.0.4.0 with encrypted pages in Windows XP, which is still partially resorted here to SHA-1 certificates, here at least would have a way to exist in this set with flags so that I can decide whether the browser should use this insecure encryption! The clearly lacks and is a no go!

This is Ok!
certok_slimjet.jpg
This is a fail!
certfail_slimjet.jpg
First, at Slimjet a minimum encrypting TLS1.0 should be standard again! Second, Java and Firefox its own certificate management have where ECC certificates (Info) work fine under Windows XP. Hope that here as soon as possible a solution to these problems is found.

:)

DiadoNiki
Posts: 10
Joined: Fri Feb 19, 2016 10:21 am

Re: Error when "https everywhere" enforce the SSL connection

Post by DiadoNiki » Tue May 31, 2016 2:56 pm

flashpeak wrote:The bug should have been fixed in 10.0.4.0.
That fixed also extension filter updates via https - viewtopic.php?f=6&t=1003.
Good work!

flashpeak
Site Admin
Posts: 361
Joined: Mon Apr 21, 2014 3:57 pm

Re: Error when "https everywhere" enforce the SSL connection

Post by flashpeak » Wed Jun 01, 2016 12:00 am

How did you arrive at the 2nd problem page? I tried the same url (https://plus.google.com/collections/featured ) in Slimjet 10.0.4.0 and everything was ok.
heinoganda wrote:There is a problem in Slimjet Version 10.0.1.0/10.0.2.0/10.0.4.0 with encrypted pages in Windows XP, which is still partially resorted here to SHA-1 certificates, here at least would have a way to exist in this set with flags so that I can decide whether the browser should use this insecure encryption! The clearly lacks and is a no go!

This is Ok!
certok_slimjet.jpg
This is a fail!
certfail_slimjet.jpg
First, at Slimjet a minimum encrypting TLS1.0 should be standard again! Second, Java and Firefox its own certificate management have where ECC certificates (Info) work fine under Windows XP. Hope that here as soon as possible a solution to these problems is found.

:)
Stephen Cheng
FlashPeak Inc.

heinoganda
Posts: 3
Joined: Tue May 31, 2016 12:03 pm

Re: Error when "https everywhere" enforce the SSL connection

Post by heinoganda » Wed Jun 01, 2016 1:45 am

This problem I have with all Google sites, which makes the browser a fallback to SHA-1 certificate who are unsure (No green lock before https). I'm experiencing this phenomenon is not on the first start from Slimjet, but sometime the Google Sites be decrypted only with SHA-1. If I manually root certifikat "Equifax Secure Certificate Authority_22/08/1998-22/08/2018" lock, then a secure certificate is used (green lock before https) again. As already mentioned here use Windows XP x86.

Slimjet should not resort to SHA-1 certificates when a secure certificate is available!

Update:
Now that I have sites visits only with the Internet Explorer (version 8, homesite google.com) function, I noticed that this problem immediate occurs.

Thanks for your efforts.
Last edited by heinoganda on Thu Jun 02, 2016 5:32 am, edited 1 time in total.

User avatar
Sampei Nihira
Posts: 2
Joined: Mon May 23, 2016 10:34 am

Re: Error when "https everywhere" enforce the SSL connection

Post by Sampei Nihira » Wed Jun 01, 2016 7:44 am

Image


Not fixed.
釣りキチ三平

heinoganda
Posts: 3
Joined: Tue May 31, 2016 12:03 pm

Re: Error when "https everywhere" enforce the SSL connection

Post by heinoganda » Wed Jun 01, 2016 8:52 am

@Sampei Nihira

1. The Slimjet browser uses the certificate management of Windows.

2. The certificate of "https://www.wilderssecurity.com" is not processed correctly by the certificate management under "Windows XP x86".

3. Since Firefox brings its own certificate management where the certificate of "https://www.wilderssecurity.com" processed correctly, is also displayed according to this website!

4. There are two ways, so that the browser Slimjet its own certificate management features like the Firefox or "Windows XP x86" takes the certificate management to a current state of technology can be brought where work with under ECC certificates.

Unfortunately, my English is not that great, but I think that my explanation is understandable.

greetings

Post Reply