Safari could not establish a secure connection to Wikipedia?

Question

Level 4

1,083 points

Safari could not establish a secure connection to Wikipedia?

I am trying to connect to Wikipedia.org using Safari version 10.0 (12602.1.50.0.10), on 10.12 (sierra) but get an error stating that "Safari Can't Open then Page", because "safari can't open a secure connection to the server". There is no padlock or anything else to try to get more information on the issue.

Trying in Google Chrome, "54.0.2840.59 beta (64-bit)", I am told that "Your connection is not private" and "NET::ERR_CERT_REVOKED". Clicking on the red warning symbol I get an indication that the "certificate issuer is invalid", with the certificate issuer being "GlobalSign Organization Validation CA - SHA256 - G2".

A friend on the the same local network running a Mac, with 10.11 (El Capitan), reports no such issues. I also see no reports on the internet, suggesting the problem is probably local to my computer.

Can anyone suggest a way to solve this issue?

Edit: seems like someone else is seeing issues with that certificate authority too, as reported on 'Stack Exchange'.

MacBook Air (13-inch Mid 2013), OS X El Capitan (10.11.6), null

Posted on Oct 13, 2016 7:48 AM

Reply

Answer 1

dialabrain

Level 10

122,483 points

Oct 13, 2016 8:00 AM in response to Andre John Mas

Are you using https://www.wikipedia.org/

Reply

Answer 2

Csound1

Level 9

59,973 points

Oct 13, 2016 8:02 AM in response to Andre John Mas

Works for me, no errors.

Reply

Answer 3

JimmyCMPIT

Level 7

29,217 points

Oct 13, 2016 8:05 AM in response to Andre John Mas

check your clock.

Whats the date and time on your computer?

Reply

Answer 4

Andre John Mas Author

Level 4

1,083 points

Oct 13, 2016 8:13 AM in response to dialabrain

I am indeed. I wouldn't get this issue with a plain 'http' connection and wikipedia redirects to their https port anyhow.

Further I am seeing this may be a Verisign issue, with has indicated on Twitter:

We are currently experiencing issues with our OCSP which is causing certificate warning messages. We aim to fix this as soon as possible.

This won't effect everyone, since it will depend the CDN node.

BTW time on my computer is correct.

Steps according to Verisign on the the Mac side "If you’d like to delete both OCSP and CRL cache, in a terminal, enter the following command", though it may depend on the CDN updates as well:

sudo rm /var/db/crls/*cache.db

Reply

Answer 5

pablitt

Level 1

8 points

Oct 13, 2016 8:47 AM in response to Andre John Mas

I'm having the same problem, so far I cannot access https://wikipedia.org or https://drupal.org

Also, ZenMate is not able to connect to any servers because of the same issue.

I've tried changing the GlobalSign certs from default to not trusted to always trust in Keychain access but no luck.

I've also ran

sudo rm /var/db/crls/*cache.db

with no luck at all.

Using Mac OS Sierra latest Public Beta

Reply

Answer 6

dialabrain

Level 10

122,483 points

Oct 13, 2016 8:55 AM in response to Andre John Mas

What's interesting is when you first posted Wikipedia was working fine in Safari for me. Now it's not. Still works in Firefox.

Reply

Answer 7

Oct 13, 2016 8:55 AM in response to pablitt

Maybe it is because you are using a beta OS. We can not discuss beta os issues here.

Reply

Answer 8

dialabrain

Level 10

122,483 points

Oct 13, 2016 9:12 AM in response to pablitt

FWIW it is not a beta issue.

Reply

Answer 9

SPCooper

Level 1

8 points

Oct 13, 2016 9:17 AM in response to BobTheFisherman

Not a Beta OS issue. I am running OSX 10.12, and have the same issue with Safari and Chrome. HTTPS sites are not loading. Typically chrome gives me the Net::err_cert_revoked message.

Reply

Answer 10

scheeko

Level 1

58 points

Oct 13, 2016 9:22 AM in response to Andre John Mas

Same here, on mac OS 10.12 (not beta). Works on Firefox, but not on Safari or Chrome, with the same NET::ERR_CERT_REVOKED error:

Subject: *.wikipedia.orgIssuer: GlobalSign Organization Validation CA - SHA256 - G2Expires on: 10 Dec 2016Current date: 13 Oct 2016

Reply

Answer 11

JimmyCMPIT

Level 7

29,217 points

Oct 13, 2016 9:21 AM in response to SPCooper

FWIW all the images linked to Wikipedia are not working for me, not from any link on their site.

Reply

Answer 12

SPCooper

Level 1

8 points

Oct 13, 2016 9:22 AM in response to Andre John Mas

I can force the connection by manually going into the certs in the keychain and changing the settings to 'always trust' I do not like doing this because of the security risks.

Reply

Answer 13

dialabrain

Level 10

122,483 points

Oct 13, 2016 9:25 AM in response to SPCooper

I agree.

Reply

Answer 14

Oct 13, 2016 9:47 AM in response to Andre John Mas

I have the same issue on udemy.com out of the blue, on Sierra with both Safari and Chrome and on iMac and macBookPro. It must be linked to an ssl certificate issue on the server side but in keychain nothing shows as expired. I think GlobalSign certificates have a pb with MacOs credentials. I only get this on udemy whilst wikipedia works however...

Reply

Answer 15

Oct 13, 2016 9:52 AM in response to SPCooper

I did not say it may be a beta issue for you. I was responding to pablitt.

Reply