Bug 513966

Summary: unable to access krita-artists forum
Product: [Applications] krita Reporter: fae <pinkskyatnight>
Component: GeneralAssignee: Krita Bugs <krita-bugs-null>
Status: RESOLVED NOT A BUG    
Severity: normal CC: dimula73, ghevan
Priority: NOR    
Version First Reported In: unspecified   
Target Milestone: ---   
Platform: Appimage   
OS: Linux   
Latest Commit: Version Fixed/Implemented In:
Sentry Crash Report:

Description fae 2025-12-30 00:30:31 UTC
Hello :-)

Need to report that am unable to access https://krita-artists.org. Am running Librewolf and nothing's changed on my end except changing vpn from using openvpn to wireguard, due to mullvad dropping openvpn. Everything's working fine, no issues with any other sites. 

I've tried both https and http, but both time out. Used More Tools/Browser Console ... can see at the bottom of that page that it randomly says over a few occasions of trying such as ... 

HTTPS-Only Mode: Upgrading insecure speculative TCP connection “http://krita-artists.org/” to use “https”.
HTTPS-Only Mode: Upgrading insecure request “http://krita-artists.org/” to use “https”.
HTTPS-Only Mode: Upgrading insecure request “https://krita-artists.org/” failed. (M6-C2)
HTTPS-Only Mode: Not upgrading insecure request “http://krita-artists.org/” because it is exempt. 

[really not sure what to look for, but know Librewolf runs in https-only mode as main setting]

I've tried https://www.isitdownrightnow.com/krita-artists.org.html and it says it's up and reachable. 
Not sure what's happening, or what else to try. Haven't changed any browser settings or anything but the vpn mode. 

Thanks, fae
Comment 1 fae 2025-12-30 00:43:30 UTC
Just to add, if it's that social media features have been added, I block all that in hosts file e.g. facebook.
Comment 2 vanyossi 2025-12-30 03:13:01 UTC
This is not a bug in krita, which this site is for.

It all sounds the issue is a configuration issue on your end: as you said you changed some vpn settings. Please check
Comment 3 Dmitry Kazakov 2025-12-30 11:19:39 UTC
ssltest says everything is fine with SSL configuration:

https://www.ssllabs.com/ssltest/analyze.html?d=krita-artists.org&s=165.227.155.151

Perhaps you could just try typing full address with the https prefix? Like this

https://krita-artists.org

Please also check if you VPN app spoofs the root certificate for the sites. It can cause some issues as well.
Comment 4 fae 2025-12-30 15:39:06 UTC
Hello :-)
Thanks for response. Much appreciate.
I can confirm that it's not a vpn issue, as I can access https://krita-artists.org/ from the latest mullvad browser. I prefer not to run that as don't want to access tor etc. I haven't changed any settings in Librewolf, so it must be something to do with a forum upgrade? refusing an older browser? I was using the https link, but have tried again ... unfortunately the same time out. 
Thanks for the link to ssllabs. I'm sorry, but I don't know anything about spoofing. I just followed mullvad's guide to switch to wireguard in the gui, installed wireguard and openresolv, and am using the same server/socks settings, nothing changed in Librewolf but the socks entry saying gb-mnc-wg-socks5-004.relays.mullvad.net instead of the openvpn version of that line ... same port. Again, followed illustrated instructions about that. Luckily it's all worked, and not having any issues with other sites. 
Thanks, fae
Comment 5 fae 2025-12-30 15:43:35 UTC
Searching 'linux' on the ssllabs page doesn't bring any results, I just noticed.
Comment 6 fae 2025-12-30 15:49:03 UTC
Searching 'linux' on the ssllabs page doesn't bring any results, I just noticed.
Comment 7 fae 2025-12-30 16:18:47 UTC
Sorry for duplicated message ... didn't know it would do that on refreshing page and keeping my post, which is what I thought had done. 

Just to update that tried latest Librewolf appimage, and still the krita forum times out. Unfortunately it's making me think it's something to do with privacy levels? Some privacy settings that are standard in Librewolf, the krita forum now doesn't run with? The mullvad browser has overall 'standard' security settings, whereas Librewolf has 'strict' settings, and I don't want to be dropping security measures lower.
Comment 8 fae 2026-01-07 13:58:18 UTC
Hello again 
Just added the Qualys link to post where am asking Librewolf about any solutions, and am seeing 2 results, not the one A+ that showed up previously, and the second result is showing inability to connect. 

SSL Report: krita-artists.org
Assessed on:  Wed, 07 Jan 2026 13:48:26 UTC 

  	Server 	Test time 	Grade
1 	165.227.155.151
eoan.kde.org
Ready
	Wed, 07 Jan 2026 13:46:59 UTC
Duration: 71.253 sec 	
A+

2 	2a03:b0c0:3:d0:0:0:1079:c001
eoan.kde.org
Unable to connect to the server
	Wed, 07 Jan 2026 13:48:11 UTC
Duration: 15.20 sec 	-

Warning: Inconsistent server configuration
Comment 9 fae 2026-01-07 15:04:15 UTC
Just to wrap things up, it's come clear that running mullvad vpn through normal wireguard socks5 in Librewolf is what is blocking mastodon.art images and access to krita forum in Librewolf. Every other site runs perfectly, and I can't reduce browser security to accommodate changes made on two sites, so end up bemused. I thought security measures being taken was a good thing and that wireguard was what most linux people/sites are using, so am puzzled as to why socks5 access is being blocked. Don't want to use the mullvad browser due to tor inbuilt, so whatever's changed is basically blocking access to the forum. Anyway, will sign off.
Comment 10 fae 2026-01-07 15:08:01 UTC
Forgot to add that tried running another discourse site and it ran perfectly. Hopefully whatever change has been made to block socks5 can be reversed. Fingers crossed.
Comment 11 Dmitry Kazakov 2026-01-08 13:48:54 UTC
Hi, fae!

Could you test the following things?

1) Try to open https://test-ipv6.com/ in the affected browser and see what it reports. It might be that your ISP/VPN does not support IPv6.
2) Go to `about:config` in your Librewolf browser and change `network.dns.preferIPv6` to false.
3) If step 2 doesn't work, then try to set `network.dns.disableIPv6` to true.

You can always revert the settings back after testing.

Does any of the steps fix the issue for you?
Comment 12 Dmitry Kazakov 2026-01-08 13:53:03 UTC
Btw, I tried to run Librewolf in the "strict" mode here locally. It opens Krita Artists fine here.
Comment 13 Dmitry Kazakov 2026-01-08 17:24:51 UTC
Hi, fae!

Could you check what happens now? Sysadmins have changed something related to IPv6, so that might work differently now.