INTERACT FORUM

More => Old Versions => JRiver Media Center 19 for Windows => Topic started by: marko on March 11, 2014, 01:40:07 am

Title: Pix01 - Invalid Security Certificate
Post by: marko on March 11, 2014, 01:40:07 am
Are you guys aware of this?

(http://www.theganghut.co.uk/pics/ia/19/bugs/snap-007.jpg)
Title: Re: Pix01 - Invalid Security Certificate
Post by: JimH on March 11, 2014, 07:14:51 am
Are you using this link?
http://www.pix01.com/
Title: Re: Pix01 - Invalid Security Certificate
Post by: glynor on March 11, 2014, 09:03:07 am
Are you using this link?
http://www.pix01.com/

Right, but if you manually use https:// (https://www.pix01.com/) instead, it comes back with the jriver.com cert, which is invalid on pix01.com.

If you want to add pix01.com to your existing cert, you can probably fix this and add the extra domain to your existing cert via your CA.  If you don't have a good CA, or they don't let you do this (or it costs a ton and they're a pain to deal with...cough...GoDaddy...cough), I can wholeheartedly recommend DigiCert (http://www.digicert.com/).  Great customer service, all of the whiz-bang SSL features, reasonable pricing, and wildcard and multi-domain certs (natch).

Oh, and they're not some fly-by-night outfit.  Used by nobodies such as:
* Facebook
* Paypal
* HP
* Nasa
* Intel
* IBM
Title: Re: Pix01 - Invalid Security Certificate
Post by: bob on March 11, 2014, 05:02:11 pm
The only reason the secure site is there is for the login (which redirects to https://pix01.jriver.com).
I suppose I could simply redirect https://pix01.com to https://pix01.jriver.com and that would take care of it for people accessing the main page with ssl.

Title: Re: Pix01 - Invalid Security Certificate
Post by: marko on March 12, 2014, 01:27:04 am
Yup. It's the login page my bookmark pointed to....
https://pix01.com/login.php

I trust you guys, so an exception has been added to Firefox. IE11 doesn't offer an on page 'add exception' option, just allows you to navigate on to the page, and loads the address bar red to remind me I am visiting an evil website!

https://pix01.jriver.com/login.php works without issue.
Title: Re: Pix01 - Invalid Security Certificate
Post by: maxxsid on March 12, 2014, 02:59:55 am
http://www.pix01.com/ is blocked by the proxy server at my workplace (file sharing, pornography, blah-blah-blah). Can the site settings be tweaked to not fall into those categories?
Title: Re: Pix01 - Invalid Security Certificate
Post by: Hendrik on March 12, 2014, 03:03:25 am
That happened at my old work place as well.
Forgot about it until you mentioned it now.
Title: Re: Pix01 - Invalid Security Certificate
Post by: bob on March 12, 2014, 01:23:19 pm
That happened at my old work place as well.
Forgot about it until you mentioned it now.
File sharing and porno, really? Like, say  facebook and flickr?
I don't know that we have any control of the way the site is categorized and I wonder who  is generating that reference?
Title: Re: Pix01 - Invalid Security Certificate
Post by: maxxsid on March 12, 2014, 03:40:50 pm
Here's the exact message:

Your request to URL "http://www.pix01.com/" has been blocked by the Webwasher URL Filter Database. The URL is listed under categories (Pornography), which are not allowed as per Information Security Policy. The following reputation level was assigned to it: Neutral. If you consider the access is work-required, please send email to dl.xxxx-infosec or open a service request at itsupport.xxxxxxx.com.
Title: Re: Pix01 - Invalid Security Certificate
Post by: bob on March 18, 2014, 11:21:00 am
The neutral reputation means they haven't gathered enough data to make a decision and the default is to block.
Title: Re: Pix01 - Invalid Security Certificate
Post by: Hendrik on March 18, 2014, 11:22:12 am
Still must've picked it up for the blocklist from somewhere, its not like any unknown domain is blocked as Pornography in such systems. :D
Title: Re: Pix01 - Invalid Security Certificate
Post by: bob on March 18, 2014, 12:01:06 pm
Still must've picked it up for the blocklist from somewhere, its not like any unknown domain is blocked as Pornography in such systems. :D
Not necessarily.
Anyway, I checked the most accessed urls for the last few months and they are completely innocuous.
Title: Re: Pix01 - Invalid Security Certificate
Post by: maxxsid on March 18, 2014, 12:37:25 pm
Yes, it's McAfee Web Gateway. Somehow Pix01 got on their blocklist... I wish they blocked facebook instead..

Still must've picked it up for the blocklist from somewhere, its not like any unknown domain is blocked as Pornography in such systems. :D
Title: Re: Pix01 - Invalid Security Certificate
Post by: Hendrik on March 18, 2014, 01:06:37 pm
We actually used a McAfee proxy at the old workplace as well, so that may be it.
Title: Re: Pix01 - Invalid Security Certificate
Post by: glynor on March 18, 2014, 03:10:06 pm
We actually used a McAfee Off-His-Rocker Crazy Guy Intel proxy at the old workplace as well, so that may be it.

T, FTFY.