DDI Login Issues - Downloaded from the Wizards Community, all coding removed by Solauren

DDI Login Issues

Post/Author/DateTime Post
#1
Cinnibar
Jan 11, 2009 20:46:59 1) Every time I log in, I get the darn warning about the security certificate being invalid. Can someone fix this already?

2) I'm still sick of logging in every half hour when I'm using the compendium and I forget to click something. 24 hour login, please!
#2
orc_kirin
Jan 12, 2009 11:14:33 This sounds like a problem with your browser security settings. The solution will depend on which browser you're using.

Contact Customer Service and give them your system information (operating system and browser) and they can recommend a fix:

http://www.wizards.com/customerservice

Click the Email Us tab and fill out the form.
#3
Cinnibar
Jan 12, 2009 13:38:47 Actually, it's a server-side issue. Most likely, they haven't installed the Intermediate CA Certificate.

see: https://knowledge.verisign.com/support/kb/index?page=content&primusGeneric=true&id=SO5275

It's not a browser problem. The server is not configured correctly.

Someone please fire this up the ladder to your sysadmin.
#4
WolfStar76
Jan 12, 2009 13:51:48 The wizards membership site had an expired certificate last week, but it was resolved very quickly - the cert I see is now good until 2012.

It sounds like, for some reason, your browser isn't trusting the cert that's coming down the pipe at you - though how that's possible is beyond me, certs don't get cached, do they?

That more people aren't seeing the issue (myself included) leads me to believe the ORC is right.

When the error comes up, depending on your browser, you should have an option to "view certificate" - if you could get more info from there that would probably help.
#5
Cinnibar
Jan 12, 2009 14:05:07 I am getting the same problem on three different versions of Firefox on three different systems with two different versions of Windows...

Once the invalid certificate is accepted, I think it remains accepted until you clear browser cache, so most Firefox users only see it the first time they log into D&DI, and IE users will most likely never see the issue.

Sure, I can lower my browser security to accept varieties of invalid/insecure information, but it doesn't correct the apparent issue that there's a server configuration problem... which I've identified, I think... and provided the potential solution for... linked to the appropriate server configuration guideline/help screen @ Verisign.

Er... I really can't do much more that this. ((shrug))

I mean, I could be wrong, but the evidence seems to point the other way.
#6
mudbunny
Jan 12, 2009 14:07:55 I have passed it up the pipe.

Could you give me a copy/paste of the wording of the security certificate??

I just logged in, and I didn't get any warning, and I don't remember accepting any certificate anytime recently...
#7
Cinnibar
Jan 12, 2009 14:30:32 Sent you a screenshot in a PM, bunny, plus here's the basic instructions for replicating :

1) Firefox 2.0.0.20, clear browser cache, cookies
2) close browser
3) open browser
4) visit http://www.wizards.com/default.asp?x=dnd/welcome
5) login... bingo!

Similar warning/error in Firefox 3.0 on Vista on my laptop.

Googling similar issues results in references to the Intermediate CA Certificates being installed incorrectly. Apparently a pretty common misconfiguration.
#8
mudbunny
Jan 12, 2009 14:32:11 Thanks. I have passed the info up the chain.
#9
Cinnibar
Jan 12, 2009 14:33:27 I understand (I'm in IT) that the onus is always on the user to prove that they're not an idiot before anyone in IT takes them seriously.*

Still working on convincing you of that.

* = Ask anyone in Tech Support. All users are idiots until proven otherwise. And sometimes, they're still idiots.
#10
WolfStar76
Jan 12, 2009 15:05:42 FWIW - I don't think you're an idiot. That you know enough about certificates to track down errors at verisign tells me you probably know as much about certs as I do (fellow IT admin here - with experience installing server certs and setting up my own CAs).

I just think that if the problem was server-side it would be replicated by many users. After all, every visit to the site by users would check the certs against the CA, and we'd all get the error.

That it's only happening to you seems to indicate it would be something in your configurations.

I wonder if you're on to something about having accepted an old certificate, and if you might need to purge that old cert from your system. Have you tried it with another browser? As distasteful as IE is, you mentioned a Vista system so it's an option for testing.

FWIW, with Firefox 3. - I can login to both DDI and the Forums (and the RPGA/DCI) site without any certificate warnings. Chrome behaves the same way.

I wish I could see the error you're getting, and even look at what cert your system is referencing to help you troubleshoot further.
#11
Cinnibar
Jan 12, 2009 15:26:41
Secure Connection Failed

www.wizards.com uses an invalid security certificate.

The certificate is not trusted because the issuer certificate is unknown.

(Error code: sec_error_unknown_issuer)

* This could be a problem with the server's configuration, or it could be someone trying to impersonate the server.

* If you have connected to this server successfully in the past, the error may be temporary, and you can try again later.
Or you can add an exception…

(Firefox 3.0 doesn't let me in at all right now!)

See also PM with screenshots of Firefox 2.0.0.20 issues...
#12
WolfStar76
Jan 12, 2009 15:30:02 Unknown issuer?

You haven't, perchance, been altering your listed certificate authorities have you?

I know there was some advice on that sort of thing on Security Now recently. . . .
#13
Cinnibar
Jan 12, 2009 16:19:14 It suddenly stopped not working. I did a clean install on my laptop of Firefox3.0 and suddenly couldn't replicate the issue.

Then I switched to the other machine (which I did nothing to) and couldn't replicate the issue.

So... I guess it's fixed? Or it's an intermittent issue. Or I'm in psuedofantastica land and imagined the whole thing.

((shrug))

I wouldn't mind if I got a PM telling me that someone changed something on the server end so I knew I wasn't crazy. Or I got a PM telling me they didn't change anything so I knew I was. Right now I'm in some sort of weird indeterminate state of crazy/not-crazy.

Post/Author/DateTime	Post
#1 Cinnibar Jan 11, 2009 20:46:59	1) Every time I log in, I get the darn warning about the security certificate being invalid. Can someone fix this already? 2) I'm still sick of logging in every half hour when I'm using the compendium and I forget to click something. 24 hour login, please!
#2 orc_kirin Jan 12, 2009 11:14:33	This sounds like a problem with your browser security settings. The solution will depend on which browser you're using. Contact Customer Service and give them your system information (operating system and browser) and they can recommend a fix: http://www.wizards.com/customerservice Click the Email Us tab and fill out the form.
#3 Cinnibar Jan 12, 2009 13:38:47	Actually, it's a server-side issue. Most likely, they haven't installed the Intermediate CA Certificate. see: https://knowledge.verisign.com/support/kb/index?page=content&primusGeneric=true&id=SO5275 It's not a browser problem. The server is not configured correctly. Someone please fire this up the ladder to your sysadmin.
#4 WolfStar76 Jan 12, 2009 13:51:48	The wizards membership site had an expired certificate last week, but it was resolved very quickly - the cert I see is now good until 2012. It sounds like, for some reason, your browser isn't trusting the cert that's coming down the pipe at you - though how that's possible is beyond me, certs don't get cached, do they? That more people aren't seeing the issue (myself included) leads me to believe the ORC is right. When the error comes up, depending on your browser, you should have an option to "view certificate" - if you could get more info from there that would probably help.
#5 Cinnibar Jan 12, 2009 14:05:07	I am getting the same problem on three different versions of Firefox on three different systems with two different versions of Windows... Once the invalid certificate is accepted, I think it remains accepted until you clear browser cache, so most Firefox users only see it the first time they log into D&DI, and IE users will most likely never see the issue. Sure, I can lower my browser security to accept varieties of invalid/insecure information, but it doesn't correct the apparent issue that there's a server configuration problem... which I've identified, I think... and provided the potential solution for... linked to the appropriate server configuration guideline/help screen @ Verisign. Er... I really can't do much more that this. ((shrug)) I mean, I could be wrong, but the evidence seems to point the other way.
#6 mudbunny Jan 12, 2009 14:07:55	I have passed it up the pipe. Could you give me a copy/paste of the wording of the security certificate?? I just logged in, and I didn't get any warning, and I don't remember accepting any certificate anytime recently...
#7 Cinnibar Jan 12, 2009 14:30:32	Sent you a screenshot in a PM, bunny, plus here's the basic instructions for replicating : 1) Firefox 2.0.0.20, clear browser cache, cookies 2) close browser 3) open browser 4) visit http://www.wizards.com/default.asp?x=dnd/welcome 5) login... bingo! Similar warning/error in Firefox 3.0 on Vista on my laptop. Googling similar issues results in references to the Intermediate CA Certificates being installed incorrectly. Apparently a pretty common misconfiguration.
#8 mudbunny Jan 12, 2009 14:32:11	Thanks. I have passed the info up the chain.
#9 Cinnibar Jan 12, 2009 14:33:27	I understand (I'm in IT) that the onus is always on the user to prove that they're not an idiot before anyone in IT takes them seriously.* Still working on convincing you of that. * = Ask anyone in Tech Support. All users are idiots until proven otherwise. And sometimes, they're still idiots.
#10 WolfStar76 Jan 12, 2009 15:05:42	FWIW - I don't think you're an idiot. That you know enough about certificates to track down errors at verisign tells me you probably know as much about certs as I do (fellow IT admin here - with experience installing server certs and setting up my own CAs). I just think that if the problem was server-side it would be replicated by many users. After all, every visit to the site by users would check the certs against the CA, and we'd all get the error. That it's only happening to you seems to indicate it would be something in your configurations. I wonder if you're on to something about having accepted an old certificate, and if you might need to purge that old cert from your system. Have you tried it with another browser? As distasteful as IE is, you mentioned a Vista system so it's an option for testing. FWIW, with Firefox 3. - I can login to both DDI and the Forums (and the RPGA/DCI) site without any certificate warnings. Chrome behaves the same way. I wish I could see the error you're getting, and even look at what cert your system is referencing to help you troubleshoot further.
#11 Cinnibar Jan 12, 2009 15:26:41	Secure Connection Failed www.wizards.com uses an invalid security certificate. The certificate is not trusted because the issuer certificate is unknown. (Error code: sec_error_unknown_issuer) * This could be a problem with the server's configuration, or it could be someone trying to impersonate the server. * If you have connected to this server successfully in the past, the error may be temporary, and you can try again later. Or you can add an exception… (Firefox 3.0 doesn't let me in at all right now!) See also PM with screenshots of Firefox 2.0.0.20 issues...
#12 WolfStar76 Jan 12, 2009 15:30:02	Unknown issuer? You haven't, perchance, been altering your listed certificate authorities have you? I know there was some advice on that sort of thing on Security Now recently. . . .
#13 Cinnibar Jan 12, 2009 16:19:14	It suddenly stopped not working. I did a clean install on my laptop of Firefox3.0 and suddenly couldn't replicate the issue. Then I switched to the other machine (which I did nothing to) and couldn't replicate the issue. So... I guess it's fixed? Or it's an intermittent issue. Or I'm in psuedofantastica land and imagined the whole thing. ((shrug)) I wouldn't mind if I got a PM telling me that someone changed something on the server end so I knew I wasn't crazy. Or I got a PM telling me they didn't change anything so I knew I was. Right now I'm in some sort of weird indeterminate state of crazy/not-crazy.