THESE FORUMS NOW CLOSED (read only)

Fun Stuff => CHATTER => Topic started by: nekowafer on 22 Oct 2014, 11:34

Title: Problems arising from change of forum to HTTPS
Post by: nekowafer on 22 Oct 2014, 11:34
I can no longer connect to this forum with anything but my phone's browser. Neither of my work computers, nor my home laptop work. Neither does Tapatalk. I am confused and annoyed.
Title: Re: Problems arising from change of forum to HTTPS
Post by: hedgie on 22 Oct 2014, 11:48
Try looking at the website issues or IT support, and security threads.  There were a *lot* of issues with some security stuff, and it's caused problems for a number of people on various platforms.  I can't use the fora anymore on Opera on Linux, but the latest version of Firefox works fine, and just gives me an easily ignored warning.  Haven't tried it on Windows yet, and don't have a Mac handy.
Title: Re: Problems arising from change of forum to HTTPS
Post by: ev4n on 22 Oct 2014, 13:35
I can no longer connect to this forum with anything but my phone's browser. Neither of my work computers, nor my home laptop work. Neither does Tapatalk. I am confused and annoyed.

My home pc can't connect either.  Discussing it here:  https://forums.questionablecontent.net/index.php/topic,30025.0.html
Title: Re: Problems arising from change of forum to HTTPS
Post by: Pilchard123 on 22 Oct 2014, 14:52
I'm on the dev team for an NHS EHR system. Guess what browser version we just managed to get the go-ahead to drop support for (it's a perfect number).
Title: Re: Problems arising from change of forum to HTTPS
Post by: pwhodges on 22 Oct 2014, 15:47
I can no longer connect to this forum with anything but my phone's browser. Neither of my work computers, nor my home laptop work. Neither does Tapatalk. I am confused and annoyed.

The forum address has been changed to start with https:.  This ensures that communications to and from the forum are encrypted - in particular that your login remains secure.

In Tapatalk, remove the forum and then add it again; that will bring in the new address (starting https:) and it will work fine.

Because the forum is now https:, and (coincidentally) at the same time most servers have disabled SSLv3 because of the security breach known as Poodle, some browsers (webkit ones like Chrome and Opera in particular) will no longer open it when running on Windows XP because the more modern TLS is not sufficiently supported there.  This will not change; if you are still running XP, it's time to move on.

You will likely see a warning sign in some browsers indicating that the secure forum pages are referencing insecure data from other sites.  This is mainly because of external avatars - like mine!  I plan to change my avi to an https: link, but maybe not everyone will.

When the forum was changed, restrictions on mixing secure and insecure links also broke the YouTube embedding (now fixed) and SoundCloud embedding (still broken - I have the fix, but there is a problem applying it that I am still working on).  Twitter and Vimeo embedding was not affected.
Title: Re: Problems arising from change of forum to HTTPS
Post by: Method of Madness on 22 Oct 2014, 15:47
I'm on the dev team for an NHS EHR system. Guess what browser version we just managed to get the go-ahead to drop support for (it's a perfect number).
Chrome 28? ::)
Title: Re: Problems arising from change of forum to HTTPS
Post by: pwhodges on 22 Oct 2014, 15:58
I'm on the dev team for an NHS EHR system. Guess what browser version we just managed to get the go-ahead to drop support for (it's a perfect number).

The perfect number below 28 I assume  :evil:

In a similar vein, my University's finance system, written by Oracle and updated to the latest version less than a year ago, requires the use of Java 6.  Who is responsible for Java?  Why, Oracle!  What is the present version?  7, of course, with 8 in the wings!  They are actually continuing to produce updates of Java 6 even though the public can't get them.  The last published build of Java 6 was something like 39, I think; I'm currently on 83!
Title: Re: Problems arising from change of forum to HTTPS
Post by: Masterpiece on 22 Oct 2014, 16:02
Isn't 8 out already? I seem to recall that I've used it and got happy they switched to JavaFX instead of Swing.
Title: Re: Problems arising from change of forum to HTTPS
Post by: pwhodges on 22 Oct 2014, 16:30
Maybe - I haven't checked.  Using 6, you see...
Title: Re: Problems arising from change of forum to HTTPS
Post by: nekowafer on 22 Oct 2014, 20:28
I'm stuck on XP at work until they upgrade all the computers to 7 :(
Title: Re: Problems arising from change of forum to HTTPS
Post by: Fig on 22 Oct 2014, 21:27
I'm stuck on XP at work until they upgrade all the computers to 7 :(

I feel your pain.  We just upgraded last year after XP support was dropped and we're only allowed to use IE.  Our version of IE we're using is 7.
Title: Re: Problems arising from change of forum to HTTPS
Post by: Kugai on 22 Oct 2014, 21:42
Your bosses hate you all.
Title: Re: Problems arising from change of forum to HTTPS
Post by: pwhodges on 23 Oct 2014, 02:00
I've decided there's more going on with QC and XP, and am continuing to investigate.  The explanations I've given for this specific problem don't stack up.

Update: 

I think this specific issue is actually because the certificate is signed using the more modern SHA-2 rather than the deprecated but still generally used SHA-1; but I still can't find the exact sticking point.
Title: Re: Problems arising from change of forum to HTTPS
Post by: jwhouk on 23 Oct 2014, 04:29
Other than XP isn't supported, perhaps?
Title: Re: Problems arising from change of forum to HTTPS
Post by: Masterpiece on 23 Oct 2014, 04:32
Maybe - I haven't checked.  Using 6, you see...
Eight has some really nice improvements in syntax, you don't have to jot down an entire inner class anymore, you can just use a lambda expression:
Code: (Old Java) [Select]
printPersons(
    roster,
    new CheckPerson() {
        public boolean test(Person p) {
            return p.getGender() == Person.Sex.MALE
                && p.getAge() >= 18
                && p.getAge() <= 25;
        }
    }
);
Code: (Java 8) [Select]
printPersons(
    roster,
    (Person p) -> p.getGender() == Person.Sex.MALE
        && p.getAge() >= 18
        && p.getAge() <= 25
);
Title: Re: Problems arising from change of forum to HTTPS
Post by: ankhtahr on 23 Oct 2014, 05:29
Code: [Select]
halfur@fsi-pc1:~$ gnutls-cli -V -p 443 forums.questionablecontent.net
Resolving 'forums.questionablecontent.net'...
Connecting to '2400:cb00:2048:1::681c:1e44:443'...
*** Fatal error: A TLS fatal alert has been received.
*** Received alert [40]: Handshake failed
*** Handshake has failed
GnuTLS error: A TLS fatal alert has been received.
wat.
Title: Re: Problems arising from change of forum to HTTPS
Post by: ChaoSera on 23 Oct 2014, 05:35
Maybe - I haven't checked.  Using 6, you see...
Eight has some really nice improvements in syntax, you don't have to jot down an entire inner class anymore, you can just use a lambda expression:
Code: (Old Java) [Select]
printPersons(
    roster,
    new CheckPerson() {
        public boolean test(Person p) {
            return p.getGender() == Person.Sex.MALE
                && p.getAge() >= 18
                && p.getAge() <= 25;
        }
    }
);
Code: (Java 8) [Select]
printPersons(
    roster,
    (Person p) -> p.getGender() == Person.Sex.MALE
        && p.getAge() >= 18
        && p.getAge() <= 25
);
But I liker inner classes...
Title: Re: Problems arising from change of forum to HTTPS
Post by: pwhodges on 23 Oct 2014, 05:36
Other than XP isn't supported, perhaps?

Not supported by what, though?

XP SP3 supports SHA-2 anyway; Chrome is only giving warnings, not blocking it.  And I'm feeling that ev4n's problems on Windows 7 suggest that there is a different point of failure that I've not yet identified.  This evening I'll try some network tracing on my XP machine at home, and see that gives me any clue just where it's going wrong.
Title: Re: Problems arising from change of forum to HTTPS
Post by: Masterpiece on 23 Oct 2014, 06:02
But I liker inner classes...
blech
Title: Re: Problems arising from change of forum to HTTPS
Post by: Aimless on 23 Oct 2014, 08:09
Meanwhile I've suddenly begun to get a server error (500) when I try to check QC from work :o windows 7, IE and chrome, no details on the actual error ofc
Title: Re: Problems arising from change of forum to HTTPS
Post by: jwhouk on 23 Oct 2014, 08:25
It's happened a couple of times when I click on the link, but it's random...?
Title: Re: Problems arising from change of forum to HTTPS
Post by: pwhodges on 23 Oct 2014, 09:03
I'm wondering if there's some timing problem caused by extra delays going through CloudFlare.
Title: Re: Problems arising from change of forum to HTTPS
Post by: nekowafer on 23 Oct 2014, 09:53
I wasn't able to before, but now I can get on here with IE on my work computer. It gives me warnings and is generally very unhappy with me, but it works.

When I try to connect with Chrome, it just says "this webpage is not available". Error code: ERR_CONNECTION_CLOSED
Title: Re: Problems arising from change of forum to HTTPS
Post by: Jimor on 23 Oct 2014, 10:43
I'm wondering if there's some timing problem caused by extra delays going through CloudFlare.

I know this caused all manners of problems on the Order of the Stick Forum. I can't recall the specific issue it caused because it never affected me, but if you'd like, I can try to track it down with a search of their board issues forum.
Title: Re: Problems arising from change of forum to HTTPS
Post by: pwhodges on 23 Oct 2014, 12:12
That would be helpful, if you could!  TIA
Title: Re: Problems arising from change of forum to HTTPS
Post by: pwhodges on 23 Oct 2014, 14:53
SoundCloud embedding is now restored to health.
Title: Re: Problems arising from change of forum to HTTPS
Post by: Jimor on 23 Oct 2014, 22:13
Here's the thread that with user feedback that seems to have tracked down the problem on the other site. In short, some kind of de-syncing issue with Cloudflare caused failure to maintain logins, specifically to Scandinavia, and the admin (Rawhide) finally had to stop using the service to resolve the problem.

http://www.giantitp.com/forums/showthread.php?268622-Help-please!-Login-issue

Doesn't sound like what's going on here, but hopefully it provides an extra clue or 2 to help figure things out.
Title: Re: Problems arising from change of forum to HTTPS
Post by: bhtooefr on 24 Oct 2014, 03:45
In a similar vein, my University's finance system, written by Oracle and updated to the latest version less than a year ago, requires the use of Java 6.  Who is responsible for Java?  Why, Oracle!  What is the present version?  7, of course, with 8 in the wings!  They are actually continuing to produce updates of Java 6 even though the public can't get them.  The last published build of Java 6 was something like 39, I think; I'm currently on 83!

The client I support actually had a machine with an... interesting... problem. I had a user that needed to use something that required Java 6, and I think it was 6u45 that was the latest my client offered in their software repository. However, 6u45 was old enough that it refused to run web-based applets. Now, at the time, the enterprise standard for my client was 7u40, but it wasn't compatible with the applet in question. The solution? Uninstall all Java on the system, install 6u45, install 7u40, and then go into 7u40's control panel and disable it, forcing the use of 6u45. Then, the security checking was 7u40's, not 6u45's, and it wouldn't refuse to run (instead just presenting a warning), but 6u45 actually ran the applet.

I'm not proud.

Also, it's worth noting that the default Java on Mac OS X is 6u65, as of 10.9.5 (I don't update to new OS X minor releases until 10.x.1), but 7u67 is also installed on my machine. Makes for some real fun when trying to use Minecraft mods, because Minecraft defaults to using the default Java, unless you tell it otherwise in the launcher.
Title: Re: Problems arising from change of forum to HTTPS
Post by: ev4n on 24 Oct 2014, 05:44
As of Thursday Oct 23 afternoon EDT, I still could not log in from home, in chrome or IE.  Forgot to try mozilla last night.  I will also try other PCs including a mac on the same lan just to check, though.
Title: Re: Problems arising from change of forum to HTTPS
Post by: ev4n on 27 Oct 2014, 05:04
Oh man, forgot about this this weekend.  Will continue to gather data, tonight hopefully.
Title: Re: Problems arising from change of forum to HTTPS
Post by: ev4n on 27 Oct 2014, 15:26
And Mozilla connects no problem.  Interesting.
Title: Re: Problems arising from change of forum to HTTPS
Post by: ev4n on 27 Oct 2014, 15:33
Scratch that.  BitDefender did something and shut that down.
Title: Re: Problems arising from change of forum to HTTPS
Post by: Masterpiece on 02 Nov 2014, 17:44
Pretty sure it's related, but ever since the switch to HTTPS, whenever a thread has a youtube video, my browser freezes for a few seconds. Definitely a resource hog.
Title: Re: Problems arising from change of forum to HTTPS
Post by: ev4n on 01 Dec 2014, 04:54
With my antivirus still blocking this site, I'm starting to wonder if I'm being dumb still coming here.  I'm seriously thinking about backing out until whatever is going on technically is resolved.
Title: Re: Problems arising from change of forum to HTTPS
Post by: jwhouk on 01 Dec 2014, 05:18
Hm. Maybe it's time to do some cache clearing, or maybe try a different browser?
Title: Re: Problems arising from change of forum to HTTPS
Post by: hedgie on 01 Dec 2014, 05:20
I tend to be paranoid, but I haven't seen anything nasty coming here, either on Win 7 or Linux.  The comic page, OTOH, has had adverts that were trying to do something bad.  Your anti-virus is probably just having false-positives.  The fora, are safe.
Title: Re: Problems arising from change of forum to HTTPS
Post by: bhtooefr on 01 Dec 2014, 05:29
I'm inclined to not trust BitDefender there, there's incidents of them having rather nasty false positives in the past.
Title: Re: Problems arising from change of forum to HTTPS
Post by: ev4n on 01 Dec 2014, 07:10
I'm inclined to not trust BitDefender there, there's incidents of them having rather nasty false positives in the past.

No good security system will fail to have false positives.  I would normally expect those to be resolved, though.
Title: Re: Problems arising from change of forum to HTTPS
Post by: Eternal_Newbie on 05 Dec 2014, 10:56
Hmm when I view the forums in Seamonkey 2.30 with SSL3 disabled (Win7 SP3) (All TLS versions enabled) I usually but not always get an error popup saying "You have requested a page that is only partially encrypted and does not prevent eavesdropping", or words to that effect.

Edit : also Seamonkey 2.31
Title: Re: Problems arising from change of forum to HTTPS
Post by: bhtooefr on 05 Dec 2014, 11:28
That will be because remote avatars are allowed, and HTTPS avatars are not supported. So, if you're on a page with such a remote avatar, you'll get such a notice (due to mixed HTTP and HTTPS content).
Title: Re: Problems arising from change of forum to HTTPS
Post by: ev4n on 05 Jun 2015, 14:17
Fair this is still driving me nuts
Title: Re: Problems arising from change of forum to HTTPS
Post by: ev4n on 25 Aug 2015, 04:17
I'm inclined to not trust BitDefender there, there's incidents of them having rather nasty false positives in the past.

No good security system will fail to have false positives.  I would normally expect those to be resolved, though.

Aaaand 8 months later, they appear to be resolved.

Um, hi!
Title: Re: Problems arising from change of forum to HTTPS
Post by: Kugai on 25 Aug 2015, 17:39
'ello dere!
Title: Re: Problems arising from change of forum to HTTPS
Post by: Masterpiece on 03 Sep 2015, 09:02
Woo! Welcome back, ev4n!
Title: Re: Problems arising from change of forum to HTTPS
Post by: jwhouk on 03 Sep 2015, 09:43
Did Jeph mention what was up with the server burp the last couple of days?
Title: Re: Problems arising from change of forum to HTTPS
Post by: Pilchard123 on 03 Sep 2015, 10:19
The taste of partially digested food, that's what.
Title: Re: Problems arising from change of forum to HTTPS
Post by: Method of Madness on 03 Sep 2015, 10:51
Canadan bacon, to be precise.