Bug 393480 - SSL Error: Server's certificate does not match the URL
Summary: SSL Error: Server's certificate does not match the URL
Status: REPORTED
Alias: None
Product: Falkon
Classification: Applications
Component: general (show other bugs)
Version: 23.04.0
Platform: Manjaro Linux
: NOR normal
Target Milestone: ---
Assignee: David Rosca
URL:
Keywords:
: 412838 (view as bug list)
Depends on:
Blocks:
 
Reported: 2018-04-24 22:47 UTC by Theo
Modified: 2023-05-03 17:24 UTC (History)
7 users (show)

See Also:
Latest Commit:
Version Fixed In:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Theo 2018-04-24 22:47:40 UTC
On some sites (for instance https://socialblade.com/) I get the following error message:

 SSL Certificate Error!
 The page you are trying to access has the following errors in the SSL certificate:
  Server's certificate does not match the URL.
 Would you like to make an exception for this certificate?
Comment 1 Anmol Gautam 2018-04-25 12:44:23 UTC
You are getting this because invalid certificate error is raised while loading the request. IMHO on the url you provided, its maybe because of some adverts whose ssl certificate is invalid. 
You can read more about it at https://doc.qt.io/qt-5/qwebenginecertificateerror.html
Comment 2 Andras 2019-03-09 17:51:28 UTC
Good to know however I think it's absolutelly not normal to get these popups all the time. Do you guys even tried to Falkon to see how is it work in real? I mean there have to be an other solution to handle this SSL issue in Falkon, you get this alarm all the time I mean. Basically I considering this as a problem, utterly. Do you guys planning to solve it? Don't get me wrong, I like the QT browser idea very much and looking forward to use it however at the same time I hope it'll impove in the near future because currently it's almost a headache to use in its current state. There are too much annoying thing like this one.
Comment 3 Andras 2019-03-09 17:52:59 UTC
Forgot my system's details, sorry:
Application version 3.0.1
KDE neon 5.15
KDE Plasma Version: 5.15.2
KDE Frameworks Version: 5.55.0
Qt Version: 5.12.0
Kernel Version: 4.15.0.46-generic
Comment 4 David Rosca 2019-03-14 10:20:01 UTC
I can't reproduce it with QtWebEngine 5.12.1
Comment 5 jltrinchard 2019-04-04 18:39:28 UTC
I had the same problem while visiting reputable sites, and I couldn't reproduce the problem on Chromium and Firefox.  Nevertheless, I found out that my DNSBL on pfBlockerNG was causing the issue.  

By launching Falkon from the terminal, I would get the following:

[7645:7663:0404/123334.261921:ERROR:cert_verify_proc_nss.cc(944)] CERT_PKIXVerifyCert for www.google-analytics.com failed err=-8102
[7645:7661:0404/123434.553688:ERROR:cert_verify_proc_nss.cc(944)] CERT_PKIXVerifyCert for www.googletagservices.com failed err=-8102
[7645:7663:0404/123436.621166:ERROR:cert_verify_proc_nss.cc(944)] CERT_PKIXVerifyCert for www.googletagmanager.com failed err=-8102
[7645:7662:0404/123523.083457:ERROR:nss_ocsp.cc(614)] No URLRequestContext for NSS HTTP handler. host: ocsp.digicert.com
[7645:7662:0404/123523.083538:ERROR:nss_ocsp.cc(614)] No URLRequestContext for NSS HTTP handler. host: crl4.digicert.com
[7645:7663:0404/123525.908547:ERROR:cert_verify_proc_nss.cc(944)] CERT_PKIXVerifyCert for collector.githubapp.com failed err=-8102

That would be from visiting https://www.reddit.com/r/kde/comments/azva4r/falkon_ssl_certificate_error/ and other places.

The certificates shown in KDE's SSL Preferences and the Kleopatra/GnuPG logs looked fine.  I also don't have any NTP-related issues.  After checking the DNSBL logs, I realized that pfBlockerNG's DNS blacklist was causing the issue.  It redirects unwanted traffic to a private IP address which has a web server hosting a basic page and its own certificate.  

Firefox and Chromium silently ignore the SSL error, and I didn't add any certificate exception for the DNSBL address.  On the other hand, Falkon brings up the SSL certificate error window.  After adding an exception whenever a unique domain name becomes blacklisted, the exceptions become cleared after restarting Falkon. :(

So, presumably if a user is running pfBlockerNG, a similar DNSBL service, or blocks domains using some hosts file, then they'll probably encounter OP's problem.

I hope that was helpful.  I left the status as 'REPORTED' instead of 'CONFIRMED' because my explanation probably doesn't cover all scenarios that lead to OP's issue.
Comment 6 Andras 2019-05-10 18:11:49 UTC
(In reply to jltrinchard from comment #5)
Thanks a lot for the detailed description what perceived by you about this issue, I'm sure probably it should be enough for general user to find out some workaround to stop this behaving however lately I have anything but time and energy. In short there is nothing specific I use, I utterly have no clue about pfBlockerNG or DNSBL etc. I think Falkon should work on a basic KDE neon setup without these anoying popups. Also I think it will appear with QtWebEngine 5.12.1 as well. I'm just saying it's ok to have this issue, only it is still an abnormal behaving by Falkon, at least on my system and it's appeared not yesterday but long long ago on my previous installations too.
Comment 7 jltrinchard 2019-05-13 18:57:22 UTC
(In reply to Andras from comment #6)
> (In reply to jltrinchard from comment #5)

No worries, Andras.  Best of luck in dealing with the more pressing goals! :D
Comment 8 xqqy189 2019-10-11 07:24:19 UTC
*** Bug 412838 has been marked as a duplicate of this bug. ***
Comment 9 John 2023-05-03 17:24:44 UTC
This happens to me also on navyfederal.org specifically when the site automatically logs you out, even when the tab is switched to another. I'm using Falkon as my main browser for a week so far and have to say, I'm really pleased with it other than this mild annoyance.