-
Notifications
You must be signed in to change notification settings - Fork 7
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
SavePageNow can't record websites whose CA certificate is slightly misconfigured #1284
Comments
arquivo/arquivo-webapp-eros@8e73a64 changes the checking behavior. Instead of blocking the request, it lets it go through and logs the error. e.g.: This is good because we are no longer blocking users from using our service. However, we now are susceptible to getting some cryptic messages while trying to use SavePageNow: This SO answer has a solution to the CA certificate problem. We should analyze the logs to see if we should back to the previous implementation using this fix. |
A related problem, SavePageNow can be used to bypass security verification, it works on many of https://badssl.com/ examples of bad SSL. |
|
Fixed |
When trying to record some websites like www.essv.ipv.pt or stayawaycovid.pt we get the following response:
However, web browsers have no problem accessing these websites:
It happens because the CA certificate is missing some information that most web browsers can easily fill in. SavePageNow before starting to record a webpage, it tries to do a http request to the requested website. If anything goes wrong it doesn't start recording, in this case we get an error due to a misconfigured CA certificate.
The text was updated successfully, but these errors were encountered: