[Epiphany] CSS and Images are not loaded on archlinux.org

hoschi · 2015-06-25 12:29:56

Hello!

Since some days, the CSS (Layout) and Images are not loaded inside Epiphany on archlinux.org.
The reason for this seem to be an unacceptable TLS-Certificate for the CSS-File (WebKit Inspector -> Console -> Error):

Failed to load resource: Unacceptable TLS certificate https://d11xdyzr0div58.cloudfront.net/static/archweb.0cdf960f55ca.css

I have the unsharp memory, that this happend some year ago in the same way. Can we fix that?
Why do we store the CSS on a different server? It's by nature very small and a core part of the website. This feels groggy and unsecure.

Thanks

// update -> certificat details from Epiphany:
The signing certificate authority is not known

*.cloudfront.net
Identity: *.cloudfront.net
Verified by: VeriSign Class 3 Secure Server CA - G3
Expires: 10/19/2015
Subject Name
C (Country): US
ST (State): Washington
L (Locality): Seattle
O (Organization): Amazon.com, Inc.
CN (Common Name): *.cloudfront.net
Issuer Name
C (Country): US
O (Organization): VeriSign, Inc.
OU (Organizational Unit): VeriSign Trust Network
OU (Organizational Unit): Terms of use at https://www.verisign.com/rpa (c)10
CN (Common Name): VeriSign Class 3 Secure Server CA - G3
Issued Certificate
Version: 3
Serial Number: 06 FE 7A 77 26 29 96 80 A8 29 22 92 70 B5 07 4F
Not Valid Before: 2015-02-19
Not Valid After: 2015-10-19
Certificate Fingerprints
SHA1: F3 4D EF 81 76 18 DF 3F 28 94 A4 8E D0 3C AE B1 B1 66 1C BE
MD5: FB 21 9E 65 13 33 D7 58 2A 58 A5 A1 5D FC 03 CA
Public Key Info
Key Algorithm: RSA
Key Parameters: 05 00
Key Size: 2048
Key SHA1 Fingerprint: AB 1E 20 9E A0 F7 9B 1F AC 05 DF 85 C4 52 C3 50 54 CF 3F D8
Public Key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
Subject Alternative Names
DNS: cloudfront.net
DNS: *.cloudfront.net
Critical: No
Basic Constraints
Certificate Authority: No
Max Path Length: Unlimited
Critical: No
Key Usage
Usages: Digital signature Key encipherment
Critical: Yes
Extended Key Usage
Allowed Purposes: Server Authentication Client Authentication
Critical: No
Extension
Identifier: 2.5.29.32
Value: 30 5C 30 5A 06 0A 60 86 48 01 86 F8 45 01 07 36 30 4C 30 23 06 08 2B 06 01 05 05 07 02 01 16 17 68 74 74 70 73 3A 2F 2F 64 2E 73 79 6D 63 62 2E 63 6F 6D 2F 63 70 73 30 25 06 08 2B 06 01 05 05 07 02 02 30 19 1A 17 68 74 74 70 73 3A 2F 2F 64 2E 73 79 6D 63 62 2E 63 6F 6D 2F 72 70 61
Critical: No
Extension
Identifier: 2.5.29.35
Value: 30 16 80 14 0D 44 5C 16 53 44 C1 82 7E 1D 20 AB 25 F4 01 63 D8 BE 79 A5
Critical: No
Extension
Identifier: 2.5.29.31
Value: 30 22 30 20 A0 1E A0 1C 86 1A 68 74 74 70 3A 2F 2F 73 64 2E 73 79 6D 63 62 2E 63 6F 6D 2F 73 64 2E 63 72 6C
Critical: No
Extension
Identifier: 1.3.6.1.5.5.7.1.1
Value: 30 49 30 1F 06 08 2B 06 01 05 05 07 30 01 86 13 68 74 74 70 3A 2F 2F 73 64 2E 73 79 6D 63 64 2E 63 6F 6D 30 26 06 08 2B 06 01 05 05 07 30 02 86 1A 68 74 74 70 3A 2F 2F 73 64 2E 73 79 6D 63 62 2E 63 6F 6D 2F 73 64 2E 63 72 74
Critical: No
Signature
Signature Algorithm: SHA1 with RSA
Signature Parameters: 05 00
Signature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

Last edited by hoschi (2015-06-25 12:36:39)

Spider.007 · 2015-06-25 14:29:22

Doesn't epiphany use the CA's from your arch-install? Does this work properly if you use curl on the cli?

Last edited by Spider.007 (2015-06-25 14:29:40)

hoschi · 2015-06-25 15:33:27

The world isn't that simple

Genereally the base certificates are provides by ca-certificaes, but the actually used SSL/TLS implementation can be provided by NSS, OpenSSL or GNUTLS. Epiphany uses GNUTLS, which is provied through libsoup and glib-networking. Furthermore Epiphany has NSS as optional dependency, after a short look and the sourccode and some old comments from 2009 this allows the import of passwords from GECKO.

Here is a fine example why certificates are just "horror":
https://blogs.gnome.org/mcatanzaro/2015 … om-fiasco/

Oftern there is no "right" or "wrong", just "grey". The certificate system behind SSL/TLS is complicated and I personally consider it as broken by design, because the top of the chain forces you to trust others. Real trust requires mutual trust, PGP and the Web-of-Trust is an example (Archlinux is an example for it's usage).

Hoschi

// update
https://bugs.archlinux.org/task/45468

Last edited by hoschi (2015-06-25 15:53:43)

Arch Linux

#1 2015-06-25 12:29:56

[Epiphany] CSS and Images are not loaded on archlinux.org

#2 2015-06-25 14:29:22

Re: [Epiphany] CSS and Images are not loaded on archlinux.org

#3 2015-06-25 15:33:27

Re: [Epiphany] CSS and Images are not loaded on archlinux.org

Board footer