Skip to content
This repository has been archived by the owner. It is now read-only.

Angular.io Website SSL Certificate Problem #1875

Open
nickhod opened this issue Jul 13, 2016 · 101 comments
Open

Angular.io Website SSL Certificate Problem #1875

nickhod opened this issue Jul 13, 2016 · 101 comments
Assignees

Comments

@nickhod
Copy link

@nickhod nickhod commented Jul 13, 2016

The angular.io website does not work with ESET NOD32, I believe there is a certificate problem.
The certificate has many spam sites in the SAN field.

In NOD32 I have to "Disable HTTPS checking" to view the site or it is blocked.

This happens on no other sites that I visit regularly.

@ocombe
Copy link

@ocombe ocombe commented Jul 13, 2016

I have the same issue, it's related to the certificate for firebase (which is the same for angular.io), you probably have the same issue with https://www.firebase.com/
But I think the problems is with Eset, not really Google
It's good to know that I'm not the only one though!

@nickhod
Copy link
Author

@nickhod nickhod commented Jul 13, 2016

I think it's related to the number of 'questionable quality' sites listed on certificate.

https://www.sslshopper.com/ssl-checker.html#hostname=angular.io

Angular should get their own certificate to sidestep the problem.
Wasted an hour trying to figure out why the site wouldn't load. It used to work fine.

@ocombe
Copy link

@ocombe ocombe commented Jul 13, 2016

Yes, that's a good idea, and for firebase as well, it should be an official and exclusive google certificate

@akarel
Copy link

@akarel akarel commented Jul 14, 2016

Same issue here. ESET NOD32 was the culprit.

@asaf050
Copy link

@asaf050 asaf050 commented Jul 19, 2016

Turn off SSL filtering solved it
http://support.eset.com/kb3126/?locale=en_US

@jhjdev
Copy link

@jhjdev jhjdev commented Jul 22, 2016

I also had the same issue. Angular.io seems is so far the only site I've encountered this. I can access it on my mobile on the same network without any problems.
When I disable the HTTPS checking in ESET NOD32 I can access the site without a problem.

@jhjdev
Copy link

@jhjdev jhjdev commented Jul 22, 2016

It's also possible to load the website under ESET NOD32 by disabling HTTPS scanning (guessing it's almost the same thing?)
udklip

@kentweigel
Copy link

@kentweigel kentweigel commented Jul 22, 2016

For those who would rather only allow access for the certificate used by angular.io, you can
Note: this refers to NOD32 ANTIVIRUS 9
Click "Setup"
Click "Internet Protection"
Click the gear to the right of "Web access protection"
Click "WEB AND EMAIL"
Expand "SSL/TLS"
Click the "Edit" link next to "List of known certificates"
Click "Add"
Click "URL"
Enter https://angular.io
Choose "Auto" for "Access action"
Choose "Ignore" for "Scan action"
Click "OK" 3 times to close 3 dialog boxes (one click each)
Try again to browse to https://angular.io
A dialog will come up about encrypted network traffic. Select "Remember Action for this certificate" and then click "Allow".

@ShaneCourtrille
Copy link

@ShaneCourtrille ShaneCourtrille commented Sep 7, 2016

It appears this problem can be extended to those using FortiGate firewalls.

https://sites.google.com/site/scriptsexamples/available-web-apps/awesome-tables/documentation/known-issues/ssl-issue

Note sure if there is a work around for this at this time.

@acoronel
Copy link

@acoronel acoronel commented Sep 12, 2016

Indeed, I am behind a FortiGate Firewall and can't access any page under https://angular.io

Anyone knows if the tutorials are available elsewhere?

@ocombe
Copy link

@ocombe ocombe commented Sep 12, 2016

You can build the repo locally: https://github.com/angular/angular.io

@ShaneCourtrille
Copy link

@ShaneCourtrille ShaneCourtrille commented Sep 12, 2016

I'm actually trying that @ocombe but when I do my gulp server-and-sync the Chrome tab that is trying to load it just spins for forever.

I've realized that's because I don't have things setup properly but the next hurdle is the Python requirement. Quite a pain just to read some documentation.

@marcusreese
Copy link

@marcusreese marcusreese commented Sep 20, 2016

Today I can't access angular.io using Chrome. I get this message:
This site can’t provide a secure connection
angular.io didn’t accept your login certificate, or your login certificate may have expired.
Try contacting the system admin.
ERR_BAD_SSL_CLIENT_AUTH_CERT

@jeffbcross
Copy link
Contributor

@jeffbcross jeffbcross commented Sep 20, 2016

@marcusreese that's unusual. Is it still occurring, or was it temporary?

@ocombe
Copy link

@ocombe ocombe commented Sep 20, 2016

it's still occurring to all of us who use those firewalls / antivirus softwares

@ShaneCourtrille
Copy link

@ShaneCourtrille ShaneCourtrille commented Sep 21, 2016

I had our security people do some config changes to allow access but the firebase CDN IP changed yesterday so that broke that. It's looking like we either need to spend time/effort replicating the documentation locally or find another framework to use. I'm wondering how many other Enterprises (who would be the more likely consumers of Fortigate firewalls) are going to have the same choice because of one silly SSL certificate.

@ocombe
Copy link

@ocombe ocombe commented Sep 21, 2016

@jeffbcross I can show you the problem at angular connect next week if you want

@fletort
Copy link

@fletort fletort commented Oct 5, 2016

Same problem for me.... and impossible to modify the FortiGate Firewall of the place where is my entreprise..... and we are working with angular.... so it's very very difficult to can get access to documentation :-(.

@ocombe
Copy link

@ocombe ocombe commented Oct 5, 2016

To all of you who struggle to access the documentation, it is also available on devdocs: http://devdocs.io/angular~2.0_typescript/

@ShaneCourtrille
Copy link

@ShaneCourtrille ShaneCourtrille commented Oct 5, 2016

I'm also in contact with Firebase to see if they can fix anything on there side as this issue impacts all the sites on that SSL certificate.

@ShaneCourtrille
Copy link

@ShaneCourtrille ShaneCourtrille commented Oct 5, 2016

@ocombe Images aren't working as per http://devdocs.io/angular~2.0_typescript/cookbook/component-communication

Not sure if that's something that can be resolved or where I'd report it but still a nice workaround for now.

@BLITZandKILL
Copy link

@BLITZandKILL BLITZandKILL commented Oct 5, 2016

Same issue here, I as well am behind a FortiGate firewall

@drhc
Copy link

@drhc drhc commented Oct 5, 2016

Same issue here as well - behind a FortiGate firewall. EDIT: Should add that, like Shane above, the change of CDN IP broke the firewall rule we previously had in place that was working.

@urbanhusky
Copy link

@urbanhusky urbanhusky commented Oct 7, 2016

Same issue. Both Bitdefender and ESET won't allow for a connection to be made.
The workaround in #1875 (comment) can not be applied because the options in the comment are no longer available.

This is critical for us, because we need to access the site.

@mehdinh
Copy link

@mehdinh mehdinh commented Oct 31, 2016

It works, thanks.

P.S.
I was playing with ESET Internet Security options. After changing SSL mode from automatic to interactive it worked. I reverted mode to automatic and it was still working.
Exactly in that moment the cert was updated :).

@ShaneCourtrille
Copy link

@ShaneCourtrille ShaneCourtrille commented Oct 31, 2016

Works behind a Fortigate firewall now!

Thanks very much!

@jeffbcross
Copy link
Contributor

@jeffbcross jeffbcross commented Oct 31, 2016

Well, it seems like the new cert worked! I'll close this issue now. If anyone experiences a similar issue, please create a new issue and mention me in it.

@jeffbcross jeffbcross closed this Oct 31, 2016
@jeffbcross
Copy link
Contributor

@jeffbcross jeffbcross commented Oct 31, 2016

And big thanks to @mbleigh for taking care of this!

@jlsjonas
Copy link

@jlsjonas jlsjonas commented Nov 8, 2016

@mbleigh this does mean that all/most other firebase hosting customers are dealing with the same unreachability though...

@mbleigh
Copy link

@mbleigh mbleigh commented Nov 8, 2016

We're working on a solution for everyone. Consider this a small test of
future progress 😉

On Tue, Nov 8, 2016, 7:27 AM Jonas De Kegel notifications@github.com
wrote:

@mbleigh https://github.com/mbleigh this does mean that all/most other
firebase hosting customers are dealing with the same unreachability
though...


You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub
#1875 (comment),
or mute the thread
https://github.com/notifications/unsubscribe-auth/AAAD_lmwXX2ZXGKs9HFIACXO2VjXgjFyks5q8JTRgaJpZM4JLLor
.

@PaluMacil
Copy link

@PaluMacil PaluMacil commented Feb 2, 2017

@jeffbcross @mbleigh My company cannot access the site due to our third party firewall declaring the cert bad. The initial October fix seemed to work, though problems recurred a couple weeks ago. I'm not sure I can help by opening a new issue because I won't be able to verify resolution (we can't do without the site any longer and will simply be whitelisting it by close of business today).

@PaluMacil
Copy link

@PaluMacil PaluMacil commented Feb 2, 2017

I'm not sure why Github says I unassigned @jeffbcross

@mbleigh
Copy link

@mbleigh mbleigh commented Feb 2, 2017

@BLITZandKILL
Copy link

@BLITZandKILL BLITZandKILL commented Feb 2, 2017

@ocombe
Copy link

@ocombe ocombe commented Feb 2, 2017

No problem for me, it's still working

@mbleigh
Copy link

@mbleigh mbleigh commented Feb 2, 2017

@rodp82
Copy link

@rodp82 rodp82 commented Feb 6, 2017

Stopped working for me as well.
I've got Bitdefender running and turning off SSL scan allows me to access the site.
I've tried whitelisting the domain, but that didn't seem to help

@jeffswitzer
Copy link

@jeffswitzer jeffswitzer commented Feb 6, 2017

Started experiencing the same symptoms again as @rodp82

@ghost
Copy link

@ghost ghost commented Feb 8, 2017

I am facing the same problems, but as rodp82 said, turning of ssl scanning in bitdefender does the trick.

@fredricadell
Copy link

@fredricadell fredricadell commented Feb 8, 2017

For me in my company it complains that the TLS 1.0 to TLS 1.2 is deactivated. Probably for security reasons so the angular.* stack needs to be upped to the next level for us to be able to access the site.

@mbleigh
Copy link

@mbleigh mbleigh commented Feb 8, 2017

@markmaynard
Copy link

@markmaynard markmaynard commented Mar 2, 2017

Any update on this? Still experiencing cert errors as of today.

@mattslay
Copy link

@mattslay mattslay commented Mar 7, 2017

I am having this same exact problem using Chrome on Windows 10 Professional 64 bit. I get basically the same error when trying it with Firefox.

This site can’t provide a secure connection
angular.io sent an invalid response.
Try running Windows Network Diagnostics.
ERR_SSL_PROTOCOL_ERROR

Chrome:
2017-03-07_6-20-49

Firefox:
2017-03-07_6-27-08

@IgorMinar IgorMinar reopened this Mar 7, 2017
@Yolepo
Copy link

@Yolepo Yolepo commented Mar 14, 2017

Hi,
Still experiencing this error too. I'm behind a stormshield firewall. Turning off the SSL validation does the work but this is not a good solution at all.

@mbleigh
Copy link

@mbleigh mbleigh commented Mar 30, 2017

Hey all, can you give this another spin? We are no longer serving the same GlobalSign certificate and this may be resolved. Please let me know if you're still having problems!

@BLITZandKILL
Copy link

@BLITZandKILL BLITZandKILL commented Mar 30, 2017

@mxdumas
Copy link

@mxdumas mxdumas commented Mar 30, 2017

Appears to be fixed with Bitdefender too. Working now. Thanks!

@mattslay
Copy link

@mattslay mattslay commented Mar 30, 2017

Yes! It's working now. Thanks.

@urbanhusky
Copy link

@urbanhusky urbanhusky commented Mar 31, 2017

Works fine with ESET, thanks :)

@fredricadell
Copy link

@fredricadell fredricadell commented Apr 3, 2017

Works fine now! Thanks.

@Yolepo
Copy link

@Yolepo Yolepo commented Apr 3, 2017

Works fine with à firewall. Thanks.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Linked pull requests

Successfully merging a pull request may close this issue.

None yet
You can’t perform that action at this time.