Page 1 of 2

Error when "https everywhere" enforce the SSL connection

Posted: Mon May 23, 2016 10:51 am
by Sampei Nihira
Windows XP + SlimJet ver 10.0.1.0 + HTTPS EveryWhere

Image

Image

Image

No problem with Firefox:

Image

TH.

Re: Error when "https everywhere" enforce the SSL connection

Posted: Mon May 23, 2016 1:32 pm
by south450
viewtopic.php?f=6&t=994

have the same problem.

this board is really slow in answering questions

Re: Error when "https everywhere" enforce the SSL connection

Posted: Tue May 24, 2016 12:05 am
by flashpeak
We are aware of this issue. I think it's an overlooked bug by the Chrome team when they took off support of XP. We can't expect them to fix the problem since it only happens to XP and the guys at Google won't even care. If it's a critical issue for you, you can stay with 9.0.7 for now while we look into this issue.

Re: Error when "https everywhere" enforce the SSL connection

Posted: Mon May 30, 2016 10:45 am
by flashpeak
The bug should have been fixed in 10.0.4.0.

Re: Error when "https everywhere" enforce the SSL connection

Posted: Tue May 31, 2016 12:39 pm
by heinoganda
There is a problem in Slimjet Version 10.0.1.0/10.0.2.0/10.0.4.0 with encrypted pages in Windows XP, which is still partially resorted here to SHA-1 certificates, here at least would have a way to exist in this set with flags so that I can decide whether the browser should use this insecure encryption! The clearly lacks and is a no go!

This is Ok!
certok_slimjet.jpg
This is a fail!
certfail_slimjet.jpg
First, at Slimjet a minimum encrypting TLS1.0 should be standard again! Second, Java and Firefox its own certificate management have where ECC certificates (Info) work fine under Windows XP. Hope that here as soon as possible a solution to these problems is found.

:)

Re: Error when "https everywhere" enforce the SSL connection

Posted: Tue May 31, 2016 2:56 pm
by DiadoNiki
flashpeak wrote:The bug should have been fixed in 10.0.4.0.
That fixed also extension filter updates via https - viewtopic.php?f=6&t=1003.
Good work!

Re: Error when "https everywhere" enforce the SSL connection

Posted: Wed Jun 01, 2016 12:00 am
by flashpeak
How did you arrive at the 2nd problem page? I tried the same url (https://plus.google.com/collections/featured ) in Slimjet 10.0.4.0 and everything was ok.
heinoganda wrote:There is a problem in Slimjet Version 10.0.1.0/10.0.2.0/10.0.4.0 with encrypted pages in Windows XP, which is still partially resorted here to SHA-1 certificates, here at least would have a way to exist in this set with flags so that I can decide whether the browser should use this insecure encryption! The clearly lacks and is a no go!

This is Ok!
certok_slimjet.jpg
This is a fail!
certfail_slimjet.jpg
First, at Slimjet a minimum encrypting TLS1.0 should be standard again! Second, Java and Firefox its own certificate management have where ECC certificates (Info) work fine under Windows XP. Hope that here as soon as possible a solution to these problems is found.

:)

Re: Error when "https everywhere" enforce the SSL connection

Posted: Wed Jun 01, 2016 1:45 am
by heinoganda
This problem I have with all Google sites, which makes the browser a fallback to SHA-1 certificate who are unsure (No green lock before https). I'm experiencing this phenomenon is not on the first start from Slimjet, but sometime the Google Sites be decrypted only with SHA-1. If I manually root certifikat "Equifax Secure Certificate Authority_22/08/1998-22/08/2018" lock, then a secure certificate is used (green lock before https) again. As already mentioned here use Windows XP x86.

Slimjet should not resort to SHA-1 certificates when a secure certificate is available!

Update:
Now that I have sites visits only with the Internet Explorer (version 8, homesite google.com) function, I noticed that this problem immediate occurs.

Thanks for your efforts.

Re: Error when "https everywhere" enforce the SSL connection

Posted: Wed Jun 01, 2016 7:44 am
by Sampei Nihira
Image


Not fixed.

Re: Error when "https everywhere" enforce the SSL connection

Posted: Wed Jun 01, 2016 8:52 am
by heinoganda
@Sampei Nihira

1. The Slimjet browser uses the certificate management of Windows.

2. The certificate of "https://www.wilderssecurity.com" is not processed correctly by the certificate management under "Windows XP x86".

3. Since Firefox brings its own certificate management where the certificate of "https://www.wilderssecurity.com" processed correctly, is also displayed according to this website!

4. There are two ways, so that the browser Slimjet its own certificate management features like the Firefox or "Windows XP x86" takes the certificate management to a current state of technology can be brought where work with under ECC certificates.

Unfortunately, my English is not that great, but I think that my explanation is understandable.

greetings